CVE-2026-97554

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SMB client where the cifs posix to fattr() function ignores the return value of posix info parse(). When an untrusted server provides a malformed POSIX directory entry, such as invalid SID lengths, posix info parse() returns -1 without populating the parsed structure. Consequently, uninitialized stack memory within parsed.owner and parsed.group is passed to sid to id(), which then passes these garbage bytes to request key() to construct a SID string. This process can lead to the leakage of kernel stack contents to the userspace idmap daemon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.