CVE-2026-98169

The Linux kernel contains an out-of-bounds (OOB) read vulnerability in the smb3_enum_snapshots() function of the SMB client. The issue arises because the function fails to verify the actual length of a server's reply when snapshot_array_size is smaller than GMT_TOKEN_SIZE. Since SMB2_ioctl() does...

EUVD-2026-93097

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3enumsnapshots If snapshotarraysize is smaller than GMTTOKENSIZE, smb3enumsnapshots sets retdatalen to sizeofstruct smbsnapshotarray without verifying the actual length of the server's...