CVE-2026-98405 is a vulnerability in Linux Kernel
Published on October 14, 2026
smb: client: fix missing iov bounds check in parse_posix_sids()
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix missing iov bounds check in parse_posix_sids()
In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied
out_len without being validated against the actual length of the received
iov (iov_len).
If a server provides an inflated out_len, sidsbuf_end will point past the
end of the iov. This defeats the bounds guards in posix_info_sid_size(),
allowing out-of-bounds reads into adjacent kernel memory.
Fix this by rejecting responses where the calculated sidsbuf_end would
exceed the received iov boundaries or cause pointer wraparound.
Products Associated with CVE-2026-98405
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version a90f37e3d7acfd9824f162830583bbf7846fe252 and below d91b9a3b2b38e5ac1b51e9e5b23fe53ad7b49644 is affected.
- Version a90f37e3d7acfd9824f162830583bbf7846fe252 and below b862996e5105be1293da9cdc85da77b76021c3bd is affected.
- Version a90f37e3d7acfd9824f162830583bbf7846fe252 and below 2f8ed71aaaba3bc8b19cd9930cc62e63e142b299 is affected.
- Version a90f37e3d7acfd9824f162830583bbf7846fe252 and below eac6917a42899aad0617bbf04798c5dd946a1fe5 is affected.
- Version a90f37e3d7acfd9824f162830583bbf7846fe252 and below b09d092eb24ad0110f16a9b7c1ed5d2a0c1733dc is affected.
- Version 6.6.32 and below 6.6.158 is affected.
- Version 6.6.32 and below 6.12.112 is affected.
- Version 6.6.32 and below 6.18.54 is affected.
- Version 6.6.32 and below 7.2.8 is affected.
- Version 6.6.32 and below 7.3-rc4 is affected.