NetSight
IP …
high7.1

CVE-2026-46243

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain…

Impact

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.24.1 before 5.10.258
from 5.11 before 5.15.209
from 5.16 before 6.1.175
from 6.2 before 6.6.142
from 6.7 before 6.12.92
from 6.13 before 6.18.34

Weakness classification

CWE-20CWE-825

References