Out-of-Bounds Read in Linux Kernel Affecting CIFS Client

CVE-2026-43112

What is CVE-2026-43112?

A vulnerability in the Linux kernel's CIFS client allows for an out-of-bounds read when the cifs_sanitize_prepath function processes an empty string or a string filled with delimiters. This flaw can lead to unexpected behavior, as the logic checks an incorrect pointer prior to advancement, thus enabling a read from outside the allocated memory bounds. The issue was discovered through manual code audits and confirmed with a standalone test case utilizing AddressSanitizer, resulting in a segmentation fault for the affected inputs. An important patch was introduced to prevent this scenario by implementing an early exit check, ensuring that if no valid path content remains, the function terminates gracefully.

References