Strix
73.1K

CVE-2026-99114

UnknownEPSS 0.17%

Last modified

CVE-2026-99114 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION, that is the whole of struct smb2_fs_control_info, but never assigns FileSystemControlFlags. Those four bytes go to the client as they are found in the response buffer. The buffer is zeroed on allocation, so a standalone request leaks nothing. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION, that is the whole of struct smb2_fs_control_info, but never assigns FileSystemControlFlags. Those four bytes go to the client as they are found in the response buffer. The buffer is zeroed on allocation, so a standalone request leaks nothing. A compound request can leak: the offset of the next response is advanced by the length pinned for the previous one, so a reply that was written into the buffer and then dropped in favour of the short error response of smb2_set_err_rsp() stays there, and the next reply is laid over it with only the header cleared. ksmbd does not implement quota tracking, so report no control flags.

Metrics

EPSS Probability
0.17%

5.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 995456b5e703e128904a6cbc8b3347eb3d04c72c; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < c78aea8984c84767e87f677477e4784deb8adfde; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < e8b82184a1982894820a91a72ac9857ddd5dffbf; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 370459776468fc68c97008360108f381e3120953; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < d8c450ad0d08980b39b08d435efa921086c8b227; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < 03bb4338c3a7c3fc4decf699a35753f0891aab2a; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, < c0cd3fc6824122014da2b3b0cb7ddeaa2946ec8e
LinuxLinux5.15

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-99114?
In the Linux kernel, the following vulnerability has been resolved: ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION, that is the whole of struct smb2_fs_control_info, but never assigns FileSystemControlFlags. Those four bytes go to the client as they are found in the response buffer. The buffer is zeroed on allocation, so a standalone request leaks nothing. A compound request can leak: the offset of the next response is advanced by the length pinned for the previous one, so a reply that was written into the buffer and then dropped in favour of the short error response of smb2_set_err_rsp() stays there, and the next reply is laid over it with only the header cleared. ksmbd does not implement quota tracking, so report no control flags.
How severe is CVE-2026-99114?
Severity scoring for CVE-2026-99114 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-99114?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-99114?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST