All vulnerabilities
CVE-2026-93801

Linux: smb/client: zero-initialize stack-allocated cifs_open_info_data

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
7.0High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2c5db82778f560121efda9e052e2f19c2d807c1bAlso 74ff47e6c4213fcfeba2de448d9cbda200507d22, 22532dd88694ed20bdd47523ffa709f166ce776b and 4 moreCVE List
Published24 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

  • 2c5db82778f560121efda9e052e2f19c2d807c1bLinuxCVE List
  • 74ff47e6c4213fcfeba2de448d9cbda200507d22LinuxCVE List
  • 22532dd88694ed20bdd47523ffa709f166ce776bLinuxCVE List
  • 8fce4cf4369c766a3293a05419500cbfde72e60dLinuxCVE List
  • 6.6.160LinuxCVE List
  • 6.12.111LinuxCVE List
Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/client: zero-initialize stack-allocated cifs_open_info_data

Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Text from CVE List

Affected versions 14

  • Linuxaffected: 436cfdbc57d98808fce427d9a8d97691374989b3 before 2c5db82778f560121efda9e052e2f19c2d807c1bCVE List
  • Linuxaffected: fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 before 74ff47e6c4213fcfeba2de448d9cbda200507d22CVE List
  • Linuxaffected: 057ac50638bcece64b3b436d3a61b70ed6c01a34 before 22532dd88694ed20bdd47523ffa709f166ce776bCVE List
  • Linuxaffected: 057ac50638bcece64b3b436d3a61b70ed6c01a34 before 8fce4cf4369c766a3293a05419500cbfde72e60dCVE List
  • Linuxaffected: 83d3bc866530a36a465b47cce4d2a9def2411960CVE List
  • Linuxaffected: 6.6.113 before 6.6.160CVE List
  • Linuxaffected: 6.12.54 before 6.12.111CVE List
  • Linuxaffected: 6.17.4 before 6.18CVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 4