CVE-2026-23282 smb: client: fix oops due to uninitialised var in smb2_unlink()

🗓️ 25 Mar 2026 10:26:42Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Linux kernel SMB client fix for uninitialised variable in smb2_unlink; initialise open_iov and close_iov to prevent oops on failed init.

Reporter	Title	Published	Views	Family All 17
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1596)	30 Apr 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-23282	25 Mar 202600:00	–	nessus
Amazon	Important: kernel6.18	30 Apr 202600:00	–	amazon
AstraLinux	Astra Linux - уязвимость в linux-5.10	20 May 202605:53	–	astralinux
CNNVD	Linux kernel 安全漏洞	25 Mar 202600:00	–	cnnvd
CVE	CVE-2026-23282	25 Mar 202610:26	–	cve
Cvelist	CVE-2026-23282 smb: client: fix oops due to uninitialised var in smb2_unlink()	25 Mar 202610:26	–	cvelist
Debian CVE	CVE-2026-23282	25 Mar 202610:26	–	debiancve
EUVD	EUVD-2026-15204	25 Mar 202612:30	–	euvd
NVD	CVE-2026-23282	25 Mar 202611:16	–	nvd

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/048efe129a297256d3c2088cf8d79515ff5ec864
git	www.git.kernel.org/stable/c/86163b98891aa9800f6103252e5acc7bb98afb91
git	www.git.kernel.org/stable/c/dc710c87af3341554d02d634ada1d2036c49a94a
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23282.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23282

02 Apr 2026 13:12Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.5

EPSS0.00017