Strix
64.3K

CVE-2026-89792

HIGHCVSS 7.1/10EPSS 0.15%

Last modified

CVE-2026-89792 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.

Metrics

CVSS 3.1
7.1/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS Probability
0.15%

4.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a677ebd8ca2f2632ccdecbad7b87641274e15aac, < ffa507f5f774cb4d45136b106989ebc051361263; >= a677ebd8ca2f2632ccdecbad7b87641274e15aac, < cd2bcee450bc94770be56c0b896c1a1dc6838bd8; >= a677ebd8ca2f2632ccdecbad7b87641274e15aac, < 61a8d06600c8c397f9a7e01940479d4c94a82f5f; >= a677ebd8ca2f2632ccdecbad7b87641274e15aac, < f25e93768fcc5d8287e50b1ec52a42e4c276df34; 88b7f1143b15b29cccb8392b4f38e75b7bb3e300; 51a6c2af9d20203ddeeaf73314ba8854b38d01bd; a637fabac554270a851033f5ab402ecb90bc479c; 76af689a45aa44714b46d1a7de4ffdf851ded896; >= 5.15.157, < 5.16; >= 6.1.85, < 6.2; >= 6.6.26, < 6.7; >= 6.8.5, < 6.9
LinuxLinux6.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89792?
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds reads in share config responses Validate IPC share configuration payload sizes before consuming variable-length fields. Bound veto list parsing and account for the separator byte when deriving the path length.
How severe is CVE-2026-89792?
CVE-2026-89792 has a CVSS score of 7.1/10 (HIGH severity). The EPSS model estimates a 0.15% probability of exploitation in the next 30 days.
How do I fix CVE-2026-89792?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89792?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST