DEBIAN-CVE-2026-98454

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454

A flaw in the Linux kernel SMB client allows a malicious SMB server to trigger out-of-bounds memory reads by sending malformed create context responses. The issue stems from smb2_parse_contexts() failing to limit each record to its Next field, potentially exposing bytes beyond the current context...