Out-of-bounds read in Linux kernel - CVE-2026-97560

Vulnerability details

The vulnerability allows a remote attacker to cause an out-of-bounds read.

The vulnerability exists due to an incorrect length calculation in smb2_parse_native_symlink() when parsing a share-root relative native symlink. A remote attacker can cause the client to parse a share-root relative native symlink with a crafted target to cause an out-of-bounds read.

Affected software

How to mitigate CVE-2026-97560

External References

• https://git.kernel.org/stable/c/22a9d0a9ba0c89be57558c1aa80dc60a571dd89c
• https://git.kernel.org/stable/c/2a302fdbaf7dd00d285303c94af8f48321c22993
• https://git.kernel.org/stable/c/cb26524ef4ac28fcfa554c0656e8dc412c38a8ff
• https://git.kernel.org/stable/c/d1f173d28e964ba2c3c4ebe7491d594dc8c77a40

Related Security Bulletins

• Out-of-bounds read in Linux kernel smb client