SB2026102224 - Out-of-bounds read in Linux kernel smb client

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026102224

SB2026102224 - Out-of-bounds read in Linux kernel smb client

Published: October 22, 2026

Security Bulletin ID SB2026102224
CSH Severity
High
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds read (CVE-ID: CVE-2026-98454)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to trigger out-of-bounds memory reads that may disclose sensitive information or cause a denial of service.

The vulnerability exists due to out-of-bounds reads in the Linux kernel SMB client's create-context and lease parsers when processing malformed SMB2/SMB3 create responses. A remote attacker can supply a crafted response from an SMB server with inconsistent context boundaries, data offsets, or data lengths to cause handlers to read beyond the current context or interpret unrelated bytes as file identifiers or lease data, potentially exposing sensitive information or causing a denial of service.


Remediation

Install update from vendor's website.

References