Out-of-Bounds Read Vulnerability in Linux Kernel Affecting ksmbd

CVE-2026-89792

What is CVE-2026-89792?

A vulnerability has been identified in the Linux kernel's ksmbd component that may allow for out-of-bounds reads when processing IPC share configuration responses. This risk arises from inadequate validation of payload sizes prior to processing variable-length data fields. Specifically, it pertains to the parsing of veto lists and the handling of the separator byte which affects the calculation of the path length. This flaw can potentially lead to unauthorized data access, making it crucial for systems using the affected kernel versions to apply the necessary patches promptly.

References