PT-2026-104994 · Azure Linux · Kernel
Published
2026-09-24
·
Updated
2026-09-24
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix acl.sd buf memory leak and invalid sd size error handling
-
When ndr decode v4 ntacl() fails, the code jumped to free n data which only freed n.data, skipping kfree(acl.sd buf) and leaking the buffer. Zero-initialize struct xattr ntacl acl, reorder error labels to out free to release acl.sd buf on all error paths.
-
if (acl.sd size < sizeof(struct smb ntsd)) is true, original code returned success without freeing sd buf and left stale *pntsd. Set rc = -EINVAL before jumping to out free to return error code and free buffer.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Kernel