CVE-2026-89792

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/0127f1c119bde40578f4d25f5d17333b4e75de8c
• https://git.kernel.org/stable/c/61a8d06600c8c397f9a7e01940479d4c94a82f5f
• https://git.kernel.org/stable/c/cd2bcee450bc94770be56c0b896c1a1dc6838bd8
• https://git.kernel.org/stable/c/df8aa4a09733c4d3974b1db32c1782b3aad3a151
• https://git.kernel.org/stable/c/f25e93768fcc5d8287e50b1ec52a42e4c276df34
• https://git.kernel.org/stable/c/fd636a87161def6e35876ab7943641ce457974c8
• https://git.kernel.org/stable/c/ffa507f5f774cb4d45136b106989ebc051361263