← CVE Intelligence

CVE-2026-93801

smb/client: zero-initialize stack-allocated cifs_open_info_data PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected 436cfdbc57d98808fce427d9a8d97691374989b3 before 2c5db82778f560121efda9e052e2f19c2d807c1b; affected fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 before 74ff47e6c4213fcfeba2de448d9cbda200507d22; affected 057ac50638bcece64b3b436d3a61b70ed6c01a34 before 22532dd88694ed20bdd47523ffa709f166ce776b; affected 057ac50638bcece64b3b436d3a61b70ed6c01a34 before 8fce4cf4369c766a3293a05419500cbfde72e60d; affected 83d3bc866530a36a465b47cce4d2a9def2411960; affected 6.6.113 before 6.6.160; affected 6.12.54 before 6.12.111; affected 6.17.4 before 6.18
Linux / Linuxaffected 6.18; unaffected 0 before 6.18; unaffected 6.6.160 through 6.6.*; unaffected 6.12.111 through 6.12.*; unaffected 6.18.53 through 6.18.*; unaffected 7.2 through *

CWE

No CWE identifiers supplied.

References