7
CVE-2026-93801
- EPSS 0.12%
- Veröffentlicht 24.09.2026 16:02:35
- Zuletzt bearbeitet 25.09.2026 13:17:20
- Erkennungen
smb/client: zero-initialize stack-allocated cifs_open_info_data
In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520
Version <
74ff47e6c4213fcfeba2de448d9cbda200507d22
Status
affected
Version
057ac50638bcece64b3b436d3a61b70ed6c01a34
Version <
22532dd88694ed20bdd47523ffa709f166ce776b
Status
affected
Version
057ac50638bcece64b3b436d3a61b70ed6c01a34
Version <
8fce4cf4369c766a3293a05419500cbfde72e60d
Status
affected
Version
436cfdbc57d98808fce427d9a8d97691374989b3
Status
affected
Version
83d3bc866530a36a465b47cce4d2a9def2411960
Status
affected
Version
6.12.54
Version <
6.12.111
Status
affected
Version
6.6.113
Version <
6.7
Status
affected
Version
6.17.4
Version <
6.18
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.18
Status
affected
Version
0
Version <
6.18
Status
unaffected
Version <=
6.12.*
Version
6.12.111
Status
unaffected
Version <=
6.18.*
Version
6.18.53
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.016 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 7 | 1 | 5.9 |
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
|
https://git.kernel.org/stable/c/74ff47e6c4213fcfeba2de448d9cbda200507d22
https://git.kernel.org/stable/c/22532dd88694ed20bdd47523ffa709f166ce776b
https://git.kernel.org/stable/c/8fce4cf4369c766a3293a05419500cbfde72e60d