CVE-2026-98113
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to prevent an authenticated client from flooding the kernel log.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-09-25 11:17:42.450000
Last modified
2026-10-28 18:52:59.003000
View original CVE JSON
{
"id": "CVE-2026-98113",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-09-25T11:17:42.450",
"lastModified": "2026-10-28T18:52:59.003",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: rate limit unmapped SID errors\n\nA client can include many structurally valid but unmapped SIDs in a DACL.\nLogging every mapping failure lets one request generate hundreds of kernel\nerror messages.\n\nRate limit the message to prevent an authenticated client from flooding\nthe kernel log."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"fs/smb/server/smbacl.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "3005d43143096321cc857645a9d48ef4ffde8bcf",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "674aabf554bdaffcf25f145bf32c8b4f510f7916",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "486876f957456721b5e51af532235db4c6f7bd47",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "13af319c1efec0b45fb5c1b16830eb0888b3fd1e",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "30dbb08777b9a611d7d9193c040f382fbd0e7562",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "54cb2a909996346ac6a8a3beac96c07b3dcba584",
"versionType": "git",
"status": "affected"
},
{
"version": "e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9",
"lessThan": "feca5e70fc963b088377b20879e8cd8237c2fd7d",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"fs/smb/server/smbacl.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.15",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.15",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.222",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.189",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.158",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.111",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.53",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2.7",
"lessThanOrEqual": "7.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15",
"versionEndExcluding": "5.15.222",
"matchCriteriaId": "71A72718-B484-4334-A55F-4AEF4DC98732"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.0",
"versionEndExcluding": "6.1.189",
"matchCriteriaId": "8D92935F-58C8-4A77-A806-0274F6C958F0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.6.158",
"matchCriteriaId": "575D98F4-AE0C-4D1F-91BC-CD1C75F0FED0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.7",
"versionEndExcluding": "6.12.11",
"matchCriteriaId": "B7D0DBC3-F63C-4396-8A47-6F3D4FA0556E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.13",
"versionEndExcluding": "6.18.53",
"matchCriteriaId": "7561AABB-6D5A-4324-BC66-C6C6B012AFD8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.19",
"versionEndExcluding": "7.2.7",
"matchCriteriaId": "19917B2D-B4B2-4416-A482-9C7C4929A921"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*",
"matchCriteriaId": "11E35E1B-5DB4-4AB9-9706-CD73B799EADF"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/13af319c1efec0b45fb5c1b16830eb0888b3fd1e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3005d43143096321cc857645a9d48ef4ffde8bcf",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/30dbb08777b9a611d7d9193c040f382fbd0e7562",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/486876f957456721b5e51af532235db4c6f7bd47",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/54cb2a909996346ac6a8a3beac96c07b3dcba584",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/674aabf554bdaffcf25f145bf32c8b4f510f7916",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/feca5e70fc963b088377b20879e8cd8237c2fd7d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}