CVE-2026-98114 in Linux
要約
〜によって MITRE • 2026年09月25日
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: propagate DACL parsing errors
parse_dacl() silently accepts truncated ACEs and allocation failures, allowing set_info_sec() to continue with an incomplete ACL conversion.
Return parsing and allocation errors to parse_sec_desc() so malformed security descriptors are rejected before inode attributes or ACL xattrs are updated.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.