CVE-2026-98454 smb: client: fix create context out-of-bounds reads

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2parsecontexts validates the complete create-context area but does not limit each record to its Next field before dispatching it. A malformed chain can therefore expose bytes...

CVE-2026-98454

The Linux kernel contains an out-of-bounds read vulnerability within the smb client component. The smb2_parse_contexts() function fails to limit each record to its Next field before dispatching, allowing a malformed chain to expose bytes beyond the current context. Additionally, the QFid handler ...