CVE-2026-72318

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the parse dfs referrals() function where string offsets supplied by the server are used to compute DfsPath and NetworkAddress string pointers without verifying if they remain within the response buffer. A malformed referral can cause the computed pointer to exceed the buffer boundary, resulting in a negative max len value. This value is passed to cifs strndup from utf16() and subsequently to kstrndup() as a size t, which allows strnlen() to perform an out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.