All vulnerabilities

Servers and applications

CVE-2026-98170

smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

Severity
Unrated
Published
6 Oct 2026
Last changed
30 Oct 2026
Added to UpHeron
30 Oct 2026
Fixed in
5.15.224, 6.1.191, 6.6.160, 6.12.112, 6.18.54, 7.2.8
Sources
CVE Program

Affected software

SoftwareAffected versions
Linux kernelServers and applications · cna:linux|linux
  • From 6.19 before 7.2.8
  • From 6.13 before 6.18.54
  • From 6.7 before 6.12.112
  • From 6.2 before 6.6.160
All 7 release lines
  • From 4.14 before 5.10.273
  • From 5.11 before 5.15.224
  • From 5.16 before 6.1.191
  • From 6.2 before 6.6.160
  • From 6.7 before 6.12.112
  • From 6.13 before 6.18.54
  • From 6.19 before 7.2.8

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-98170