2 matches found
CVE-2026-64139
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in setposixaclentriesdacl on overflow Commit 299f962c0b02 "ksmbd: use checkaddoverflow to prevent u16 DACL size overflow" added checkaddoverflow guards that break out of the ACE-building loops in...
CVE-2026-64139
CVE-2026-64139 : In the Linux kernel ksmbd path, a memory-leak exists in set_posix_acl_entries_dacl() on overflow. The loop allocates a struct smb_sid with kmalloc_obj() each iteration and relies on per-iteration kfree() at loop end. Introduced break paths skip these frees, causing the sid buffer...