PT-2026-93398 · Linux · Linux Kernel

CVE-2026-89792

·

Published

2026-09-16

·

Updated

2026-09-24

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ksmbd module where out-of-bounds reads can occur during the processing of share configuration responses. This happens because the system fails to validate IPC share configuration payload sizes before consuming variable-length fields. Specifically, the vulnerability involves improper bounding of veto list parsing and a failure to account for the separator byte when calculating the path length.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-101150
CVE-2026-89792
OPENSUSE-SU-2026:11880-1

Affected Products

Linux Kernel