CVE-2026-90166
Last modified
CVE-2026-90166 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See the procedure below: ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check `share->name` ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref.
Description
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See the procedure below: ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check `share->name` ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 4eb74a34ea401abfbbd5991076715dae3de938df; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 8461f27902727ad434375caf13a0100aafc0340f; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 7065d3648b1a48d2c49da3d6364dd3c4d503b10c; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < d2ccf905f47d2344270749f4dfa905afcd3edeb0 |
| Linux | Linux | 5.15 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-90166?
How severe is CVE-2026-90166?
How do I fix CVE-2026-90166?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-90160In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90161In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-90162In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-90163In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90164In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90165In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90167In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90168Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-90169In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9017The NEX-Forms – Ultimate Forms Plugin for WordPress plugin f…5.3
- CVE-2026-90170In the Linux kernel, the following vulnerability has been re…
- CVE-2026-90171In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-90166?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST