CVE WatchSep 25, 2026

CVE-2026-93801

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-

CVSS

7.0

High

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Sep 24, 2026 · Last modified: Sep 25, 2026

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-09-252026-10-19

Technical description

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Official references

git.kernel.orghttps://git.kernel.org/stable/c/22532dd88694ed20bdd47523ffa709f166ce776b
git.kernel.orghttps://git.kernel.org/stable/c/74ff47e6c4213fcfeba2de448d9cbda200507d22
git.kernel.orghttps://git.kernel.org/stable/c/8fce4cf4369c766a3293a05419500cbfde72e60d

Related CVEs

No related CVEs by CWE or product.