Strix
69.2K

CVE-2026-98405

Unknown

Last modified

CVE-2026-98405 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied out_len without being validated against the actual length of the received iov (iov_len). If a server provides an inflated out_len, sidsbuf_end will point past the end of the iov. This defeats the bounds guards in posix_info_sid_size(), allowing out-of-bounds reads into adjacent kernel memory. Fix this by rejecting responses where the calculated sidsbuf_end would exceed the received iov boundaries or cause pointer wraparound..

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied out_len without being validated against the actual length of the received iov (iov_len). If a server provides an inflated out_len, sidsbuf_end will point past the end of the iov. This defeats the bounds guards in posix_info_sid_size(), allowing out-of-bounds reads into adjacent kernel memory. Fix this by rejecting responses where the calculated sidsbuf_end would exceed the received iov boundaries or cause pointer wraparound.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= a90f37e3d7acfd9824f162830583bbf7846fe252, < d91b9a3b2b38e5ac1b51e9e5b23fe53ad7b49644; >= a90f37e3d7acfd9824f162830583bbf7846fe252, < b862996e5105be1293da9cdc85da77b76021c3bd; >= a90f37e3d7acfd9824f162830583bbf7846fe252, < 2f8ed71aaaba3bc8b19cd9930cc62e63e142b299; >= a90f37e3d7acfd9824f162830583bbf7846fe252, < eac6917a42899aad0617bbf04798c5dd946a1fe5; >= a90f37e3d7acfd9824f162830583bbf7846fe252, < b09d092eb24ad0110f16a9b7c1ed5d2a0c1733dc
LinuxLinux>= 6.6.32, < 6.6.158; >= 6.6.32, < 6.12.112; >= 6.6.32, < 6.18.54; >= 6.6.32, < 7.2.8; >= 6.6.32, < 7.3-rc4

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98405?
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculated using the server-supplied out_len without being validated against the actual length of the received iov (iov_len). If a server provides an inflated out_len, sidsbuf_end will point past the end of the iov. This defeats the bounds guards in posix_info_sid_size(), allowing out-of-bounds reads into adjacent kernel memory. Fix this by rejecting responses where the calculated sidsbuf_end would exceed the received iov boundaries or cause pointer wraparound.
How severe is CVE-2026-98405?
Severity scoring for CVE-2026-98405 is pending analysis.
How do I fix CVE-2026-98405?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98405?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST