All vulnerabilities
CVE-2026-98113

Linux: ksmbd: rate limit unmapped SID errors

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3005d43143096321cc857645a9d48ef4ffde8bcfAlso 674aabf554bdaffcf25f145bf32c8b4f510f7916, 486876f957456721b5e51af532235db4c6f7bd47 and 3 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 3005d43143096321cc857645a9d48ef4ffde8bcfLinuxCVE List
  • 674aabf554bdaffcf25f145bf32c8b4f510f7916LinuxCVE List
  • 486876f957456721b5e51af532235db4c6f7bd47LinuxCVE List
  • 13af319c1efec0b45fb5c1b16830eb0888b3fd1eLinuxCVE List
  • 30dbb08777b9a611d7d9193c040f382fbd0e7562LinuxCVE List
  • 54cb2a909996346ac6a8a3beac96c07b3dcba584LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: rate limit unmapped SID errors

A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages.

Rate limit the message to prevent an authenticated client from flooding the kernel log.

Text from CVE List

Affected versions 16

  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 3005d43143096321cc857645a9d48ef4ffde8bcfCVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 674aabf554bdaffcf25f145bf32c8b4f510f7916CVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 486876f957456721b5e51af532235db4c6f7bd47CVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 13af319c1efec0b45fb5c1b16830eb0888b3fd1eCVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 30dbb08777b9a611d7d9193c040f382fbd0e7562CVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before 54cb2a909996346ac6a8a3beac96c07b3dcba584CVE List
  • Linuxaffected: e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 before feca5e70fc963b088377b20879e8cd8237c2fd7dCVE List
  • Linuxaffected: 5.15CVE List
  • Linuxunaffected: all versions before 5.15CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 7