All vulnerabilities
CVE-2026-93812

Linux: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in306d6f370da7e0e5532dc51c972f4ce101e42431Also 9b4dec75498fd0a1c9eaea680aef59c9519eb16fCVE List
Published24 Sep 2026Updated 3 Oct 2026CVE List

What fixes it

  • 306d6f370da7e0e5532dc51c972f4ce101e42431LinuxCVE List
  • 9b4dec75498fd0a1c9eaea680aef59c9519eb16fLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry. If any subsequent ndr_write_*() call returns error during encoding, the allocated sd_ndr.data won't be freed and causes memory leak.

Move kfree(sd_ndr.data) into out label to ensure the buffer gets released on all success and error return paths.

Text from CVE List

Affected versions 14

  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before 306d6f370da7e0e5532dc51c972f4ce101e42431CVE List
  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before dc55270e410ccb4d24e637c13b5c4c25bcd106d7CVE List
  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before c866c3314a6853eb06c7a8bef67f43c8a8bdfb6eCVE List
  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before 9b4dec75498fd0a1c9eaea680aef59c9519eb16fCVE List
  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before c521dd78e036b5e0cfd394dd2ff2218890dd9e41CVE List
  • Linuxaffected: 303fff2b8c77a85c62dbde3b27c24b084144c04c before d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7CVE List
  • Linuxaffected: 5.15CVE List
  • Linuxunaffected: all versions before 5.15CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 6