CVE-2026-90174

CVE-2026-90174 is a slab-out-of-bounds read in the Linux kernel's ksmbd SMB server subsystem. The function ksmbd_alloc_user() copies resp->hash_sz bytes (a __u16 field, up to 65535) from the mountd IPC login response into a buffer, but the source resp->hash[] is only KSMBD_REQ_MAX_HASH_SZ b...

EUVD-2026-81767

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds read in ksmbdallocuser ksmbdallocuser copies resp-hashsz bytes out of the mountd IPC login response with user-passkeysz = resp-hashsz; user-passkey = kmallocresp-hashsz, KSMBDDEFAULTGFP; if...