CVE-2026-98114
mediumIn the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs and all…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs and allocation failures, allowing set_info_sec() to continue with an incomplete ACL conversion. Return parsing and allocation errors to parse_sec_desc() so malformed security descriptors are rejected before inode attributes or ACL xattrs are updated.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2026-09-25 11:17
Modified: 2026-10-28 16:13
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-28 16:34 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥5.15 <6.6.160, ≥6.7 <6.12.111, ≥6.13 <6.18.53, ≥6.19 <7.2.7, 7.3
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/37952f03d5171eb3a33b2abc2cf6e456d69ff4a1
Patch / mitigation: https://git.kernel.org/stable/c/461f10a5297e85b7c1cd21838922f2e57b934d2d
Patch / mitigation: https://git.kernel.org/stable/c/99ae165acf633b13df34105815110fec332a2cdc
Patch / mitigation: https://git.kernel.org/stable/c/a04dac1f2cffe9533f4260f0659297d805e69194
Patch / mitigation: https://git.kernel.org/stable/c/c61dc7b1b4a3234b4aa3965502908a292238805c
References
- https://git.kernel.org/stable/c/37952f03d5171eb3a33b2abc2cf6e456d69ff4a1 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/461f10a5297e85b7c1cd21838922f2e57b934d2d 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/99ae165acf633b13df34105815110fec332a2cdc 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/a04dac1f2cffe9533f4260f0659297d805e69194 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/c61dc7b1b4a3234b4aa3965502908a292238805c 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-10-28 16:34 UTC · record ↗