-
CVE-2026-90166
- EPSS 0.2%
- Veröffentlicht 17.09.2026 16:06:55
- Zuletzt bearbeitet 17.09.2026 17:17:09
- Erkennungen
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
See the procedure below:
ksmbd_tree_conn_connect
ksmbd_share_config_get
share->name = kstrdup() // fail
if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false
// do not check `share->name`
ksmbd_ipc_tree_connect_request
strlen(share->name) // null-ptr-derefDaten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version <
4eb74a34ea401abfbbd5991076715dae3de938df
Status
affected
Version
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version <
8461f27902727ad434375caf13a0100aafc0340f
Status
affected
Version
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version <
7065d3648b1a48d2c49da3d6364dd3c4d503b10c
Status
affected
Version
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Version <
d2ccf905f47d2344270749f4dfa905afcd3edeb0
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
5.15
Status
affected
Version
0
Version <
5.15
Status
unaffected
Version <=
6.12.*
Version
6.12.110
Status
unaffected
Version <=
6.18.*
Version
6.18.52
Status
unaffected
Version <=
7.2.*
Version
7.2.6
Status
unaffected
Version <=
*
Version
7.3-rc1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.102 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/4eb74a34ea401abfbbd5991076715dae3de938df
https://git.kernel.org/stable/c/8461f27902727ad434375caf13a0100aafc0340f
https://git.kernel.org/stable/c/7065d3648b1a48d2c49da3d6364dd3c4d503b10c
https://git.kernel.org/stable/c/d2ccf905f47d2344270749f4dfa905afcd3edeb0