CVE-2026-93787

The Linux kernel contains a vulnerability in the SMB client where cifs_filldir() fails to verify that the length of an entry name, provided by a server, stays within the bounds of the kmalloc'd SMB response buffer . A hostile SMB1 server can provide an oversized FileNameLength, causing memchr() t...