Linux Distros Unpatched Vulnerability : CVE-2026-98126

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE,...

PT-2026-98496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...

PT-2026-98789

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the smb3 insert range function where the new file size is not validated. This allows the FALLOC FL INSERT RANGE operation to bypass RLIMIT FSIZE a process-level limit ...

Linux Distros Unpatched Vulnerability : CVE-2026-98127

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: validate new EOF for insert range smb3insertrange does not check if the new file size isize + len is valid. This allows FALLOCFLINSERTRANGE to bypas...

CVE-2026-98126

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range When FALLOCFLZERORANGE is used without FALLOCFLKEEPSIZE, smb3zerorange may extend EOF without checking RLIMITFSIZE, allowing the file to grow beyond the caller's file-size limit. Fix th...

PT-2026-98788

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 zero range function may extend the End of File EOF without verifying the RLIMIT FSIZE limit when FALLOC FL ZERO RANGE is used without...

CVE-2026-98127

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3insertrange does not check if the new file size isize + len is valid. This allows FALLOCFLINSERTRANGE to bypass RLIMITFSIZE, exceed smaxbytes, or produce a size outside the lofft...

CVE-2026-97565: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead CIFSSMBRead reads DataLengthHigh, DataLength and DataOffset out of the READRSP returned by the server without first checking that a whole READRSP was actually received. The...

PT-2026-98786

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Server-side range operations in the SMB client modify file contents but fail to invalidate the FS-Cache cookie. While the affected page cache is discarded, the valid FS-Cache cookie may...

Linux Distros Unpatched Vulnerability : CVE-2026-98125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache...

Linux Distros Unpatched Vulnerability : CVE-2026-98124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through...

CVE-2026-97555: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite When idmodetocifsacl rewrites an existing DACL, it allocates a buffer sized according to the on-disk DACL length reported by daclptr-size. However, replacesidsandcopyaces...

PT-2026-98505

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the CIFSSMBRead function processes READ RSP responses from a server without verifying that the full response was received. Specifically, the...

PT-2026-98501

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the system fails to honor forceuid and forcegid mount options when mapping Security Identifiers SIDs to user and group IDs. Certain code paths...

CVE-2026-98124

In the Linux kernel, the following vulnerability has been resolved: smb/client: invalidate fscache for fallocate range operations smb3zerorange, smb3punchhole, smb3insertrange, and smb3collapserange modify file contents through server-side range operations. These operations discard the affected...

CVE-2026-97561: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid When the administrator mounts with forceuid or forcegid uid=/gid= mount options, they expect all files to appear owned by the specified user/group. However, severa...

PT-2026-98787

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the smb3 insert range and smb3 collapse range functions fail to properly invalidate the page cache when the offset off or old eof is not...

ROS-20260925-73-0017

The vulnerability of the smb2reconnectserver function in the fs/smb/client/smb2pdu.c module, which is part of the SMB client support in Linux kernel, relates to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Distros Unpatched Vulnerability : CVE-2026-97564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: reject userspace cifs.idmap descriptions cifs.idmap key descriptions carry authority-bearing fields owner and group SIDs and uid/gid values in...

Linux Distros Unpatched Vulnerability : CVE-2026-97562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after...