CVE-2026-98113
mediumIn the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but un…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to prevent an authenticated client from flooding the kernel log.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-09-25 11:17
Modified: 2026-10-28 18:52
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-28 19:26 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥5.15 <5.15.222, ≥6.0 <6.1.189, ≥6.2 <6.6.158, ≥6.7 <6.12.11, ≥6.13 <6.18.53, ≥6.19 <7.2.7
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/13af319c1efec0b45fb5c1b16830eb0888b3fd1e
Patch / mitigation: https://git.kernel.org/stable/c/3005d43143096321cc857645a9d48ef4ffde8bcf
Patch / mitigation: https://git.kernel.org/stable/c/30dbb08777b9a611d7d9193c040f382fbd0e7562
Patch / mitigation: https://git.kernel.org/stable/c/486876f957456721b5e51af532235db4c6f7bd47
Patch / mitigation: https://git.kernel.org/stable/c/54cb2a909996346ac6a8a3beac96c07b3dcba584
Patch / mitigation: https://git.kernel.org/stable/c/674aabf554bdaffcf25f145bf32c8b4f510f7916
Patch / mitigation: https://git.kernel.org/stable/c/feca5e70fc963b088377b20879e8cd8237c2fd7d
References
- https://git.kernel.org/stable/c/13af319c1efec0b45fb5c1b16830eb0888b3fd1e 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/3005d43143096321cc857645a9d48ef4ffde8bcf 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/30dbb08777b9a611d7d9193c040f382fbd0e7562 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/486876f957456721b5e51af532235db4c6f7bd47 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/54cb2a909996346ac6a8a3beac96c07b3dcba584 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/674aabf554bdaffcf25f145bf32c8b4f510f7916 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/feca5e70fc963b088377b20879e8cd8237c2fd7d 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-10-28 19:26 UTC · record ↗