SB2026092874 - Use of cache containing sensitive information in Linux kernel smb client

Description

This security bulletin contains information about 1 vulnerability.

1) Use of cache containing sensitive information (CVE-ID: CVE-2026-98125)

CWE-ID: CWE-524 - Use of Cache Containing Sensitive Information

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to access stale data.

The vulnerability exists due to improper page-cache invalidation in the SMB client smb3_insert_range() and smb3_collapse_range() functions when performing insert or collapse range operations on files on a CIFS mount. A local user can perform a range operation and read the affected file to access stale data.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/01261a6fa48b62f5ead8e88aaca1e27cb9ab9032
• https://git.kernel.org/stable/c/76222e76d08fbae4092ee9da84ded2b4c24ee598