CVE-2026-97559

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow occurs in the SMB client when rewriting a Discretionary Access Control List (DACL). The functions replace sids and copy aces() and set chmod dacl() use a u16 accumulator to track the size of the DACL being built. Because a rewritten Access Control Entry (ACE) can expand up to 76 bytes, the total size can exceed the 64K limit of a u16 variable, leading to a wraparound. This results in the corruption of the DACL, which is subsequently transmitted to the server. A DACL is a list that specifies which users or groups are granted or denied access to a resource.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.