-

CVE-2026-93812

ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry.
If any subsequent ndr_write_*() call returns error during encoding,
the allocated sd_ndr.data won't be freed and causes memory leak.

Move kfree(sd_ndr.data) into out label to ensure the buffer gets
released on all success and error return paths.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < 306d6f370da7e0e5532dc51c972f4ce101e42431
Status affected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < dc55270e410ccb4d24e637c13b5c4c25bcd106d7
Status affected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e
Status affected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < 9b4dec75498fd0a1c9eaea680aef59c9519eb16f
Status affected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < c521dd78e036b5e0cfd394dd2ff2218890dd9e41
Status affected
Version 303fff2b8c77a85c62dbde3b27c24b084144c04c
Version < d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/9b4dec75498fd0a1c9eaea680aef59c9519eb16f
https://git.kernel.org/stable/c/c521dd78e036b5e0cfd394dd2ff2218890dd9e41
https://git.kernel.org/stable/c/d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7
https://git.kernel.org/stable/c/306d6f370da7e0e5532dc51c972f4ce101e42431
https://git.kernel.org/stable/c/c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e
https://git.kernel.org/stable/c/dc55270e410ccb4d24e637c13b5c4c25bcd106d7