CVE-2026-93801

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb/client: zero-initialize stack-allocated cifs_open_info_data

Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 74ff47e6c4213fcfeba2de448d9cbda200507d22affected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 22532dd88694ed20bdd47523ffa709f166ce776baffected
LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8fce4cf4369c766a3293a05419500cbfde72e60daffected
LinuxLinux0 < 6.12.111affected
LinuxLinux0 < 6.18.53affected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References