CVE-2026-99109

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit the request buffer CIFSSMBSetEA copies the caller's extended attribute value into the SMB request buffer without checking that it fits. The requirement is stated in the source bu...

CVE-2026-99109 smb: client: reject SetEA requests that do not fit the request buffer

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit the request buffer CIFSSMBSetEA copies the caller's extended attribute value into the SMB request buffer without checking that it fits. The requirement is stated in the source bu...

CVE-2026-99109

The Linux kernel contains a slab-out-of-bounds vulnerability in the SMB client component. The CIFSSMBSetEA() function fails to verify that the caller's extended attribute value fits within the negotiated SMB request buffer before performing a memcpy. Specifically, the check in cifs_xattr_set() us...

EUVD-2026-112009

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject SetEA requests that do not fit the request buffer CIFSSMBSetEA copies the caller's extended attribute value into the SMB request buffer without checking that it fits. The requirement is stated in the source bu...