CVE-2026-90166

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

See the procedure below:

ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check share->name ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 4eb74a34ea401abfbbd5991076715dae3de938dfaffected
LinuxLinuxe2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 8461f27902727ad434375caf13a0100aafc0340faffected
LinuxLinuxe2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 7065d3648b1a48d2c49da3d6364dd3c4d503b10caffected
LinuxLinuxe2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < d2ccf905f47d2344270749f4dfa905afcd3edeb0affected
LinuxLinux5.15affected
LinuxLinux0 < 5.15unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.52 <= 6.18.*unaffected
LinuxLinux7.2.6 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References