CVE-2026-93801

Full vulnerability record from the local CVENow database.
Description

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.
Severity
HIGH
CVSS score
7.0 (v3.1)
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-24 17:17:13.017000
Last modified
2026-10-21 13:21:08.140000
View original CVE JSON
{
  "id": "CVE-2026-93801",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-09-24T17:17:13.017",
  "lastModified": "2026-10-21T13:21:08.140",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/client: zero-initialize stack-allocated cifs_open_info_data\n\nStack-allocated cifs_open_info_data may contain random data.\nThis can make some fields have wrong value if they are not set later."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "fs/smb/client/link.c",
            "fs/smb/client/smb1ops.c",
            "fs/smb/client/smb2ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "436cfdbc57d98808fce427d9a8d97691374989b3",
              "lessThan": "2c5db82778f560121efda9e052e2f19c2d807c1b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520",
              "lessThan": "74ff47e6c4213fcfeba2de448d9cbda200507d22",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "057ac50638bcece64b3b436d3a61b70ed6c01a34",
              "lessThan": "22532dd88694ed20bdd47523ffa709f166ce776b",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "057ac50638bcece64b3b436d3a61b70ed6c01a34",
              "lessThan": "8fce4cf4369c766a3293a05419500cbfde72e60d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "83d3bc866530a36a465b47cce4d2a9def2411960",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "6.6.113",
              "lessThan": "6.6.160",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.12.54",
              "lessThan": "6.12.111",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "6.17.4",
              "lessThan": "6.18",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "fs/smb/client/link.c",
            "fs/smb/client/smb1ops.c",
            "fs/smb/client/smb2ops.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.18",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.18",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.6.160",
              "lessThanOrEqual": "6.6.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.111",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.53",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 7.0,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.0,
        "impactScore": 5.9
      }
    ]
  },
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/22532dd88694ed20bdd47523ffa709f166ce776b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2c5db82778f560121efda9e052e2f19c2d807c1b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/74ff47e6c4213fcfeba2de448d9cbda200507d22",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8fce4cf4369c766a3293a05419500cbfde72e60d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}