CVE-2026-93785cifs: validate idmap key payload length
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length The cifs.idmap key type stores its payload length in key->datalen, which is limited to U16_MAX. Accepting a larger key payload truncates the recorded length and can make later users interpret the payload using inconsistent bounds. Reject oversized preparsed payloads before allocating or copying them. This keeps key->datalen consistent with the stored data for both inline and separately allocated idmap payloads.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 21fed0d5b763b94a7d1568c27d0cce892ab8d43e before eeac976b74b4f697cfc517187b7cbfd72652dbbc; from 21fed0d5b763b94a7d1568c27d0cce892ab8d43e before 125b05ac8ca8758950e4369c1542d57a162f504c; from 21fed0d5b763b94a7d1568c27d0cce892ab8d43e before 945f6cde6bcf8f08f6fa5df8882b1b9582e55efa; 21fed0d5b763b94a7d1568c27d0cce892ab8d43e builds before 3a4a34a732e8a08309eed0a74314dbd9f2f1c972; 21fed0d5b763b94a7d1568c27d0cce892ab8d43e builds before 6cfeef221ac00d63c07f6122f58e6159bde69ca0; 21fed0d5b763b94a7d1568c27d0cce892ab8d43e builds before 8b12f65d7caf16d124098cb4895a203367d35b57; from 21fed0d5b763b94a7d1568c27d0cce892ab8d43e before 455488cd5054bcc59db40fa1cc2c004031a5b2a5 | CNA record |
References
- https://git.kernel.org/stable/c/eeac976b74b4f697cfc517187b7cbfd72652dbbc
- https://git.kernel.org/stable/c/125b05ac8ca8758950e4369c1542d57a162f504c
- https://git.kernel.org/stable/c/945f6cde6bcf8f08f6fa5df8882b1b9582e55efa
- https://git.kernel.org/stable/c/3a4a34a732e8a08309eed0a74314dbd9f2f1c972
- https://git.kernel.org/stable/c/6cfeef221ac00d63c07f6122f58e6159bde69ca0
- https://git.kernel.org/stable/c/8b12f65d7caf16d124098cb4895a203367d35b57
- https://git.kernel.org/stable/c/455488cd5054bcc59db40fa1cc2c004031a5b2a5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.