CVE-2026-98114

Published: Sep 25, 2026Modified: Oct 28, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: propagate DACL parsing errors parse_dacl() silently accepts truncated ACEs and allocation failures, allowing set_info_sec() to continue with an incomplete ACL conversion. Return parsing and allocation errors to parse_sec_desc() so malformed security descriptors are rejected before inode attributes or ACL xattrs are updated.

Affected (5)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.15 ≤ version < 6.6.160
Linux Linux Kernel	6.13 ≤ version < 6.18.53
Linux Linux Kernel	6.19 ≤ version < 7.2.7
Linux Linux Kernel	6.7 ≤ version < 6.12.111
Linux Linux Kernel	Version 7.3 rc1