Linux Kernel Vulnerability in SMB Client Affecting Path Validation

CVE-2026-98318

What is CVE-2026-98318?

A vulnerability in the Linux kernel's SMB client allows for improper validation of absolute symlink targets when the symlinkroot option is unset. This issue arises because an absolute target can be copied without converting it to an NT drive path, leading to potential buffer overflow errors when the system expects an NT prefix that may not exist. Malicious users with write access to a mounted share can exploit this weakness, enabling them to manipulate the system's memory, resulting in unintended behavior or system crashes. It is crucial to validate the NT drive prefix before accessing or modifying file paths to mitigate these risks.

References