CVE-2026-93801

Summary

In the Linux kernel, the following vulnerability has been resolved:

smb/client: zero-initialize stack-allocated cifs_open_info_data

Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxfc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 < 74ff47e6c4213fcfeba2de448d9cbda200507d22affected
LinuxLinux057ac50638bcece64b3b436d3a61b70ed6c01a34 < 22532dd88694ed20bdd47523ffa709f166ce776baffected
LinuxLinux057ac50638bcece64b3b436d3a61b70ed6c01a34 < 8fce4cf4369c766a3293a05419500cbfde72e60daffected
LinuxLinux436cfdbc57d98808fce427d9a8d97691374989b3affected
LinuxLinux83d3bc866530a36a465b47cce4d2a9def2411960affected
LinuxLinux6.12.54 < 6.12.111affected
LinuxLinux6.6.113 < 6.7affected
LinuxLinux6.17.4 < 6.18affected
LinuxLinux6.18affected
LinuxLinux0 < 6.18unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References