CVE-2026-93812ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry. If any subsequent ndr_write_*() call returns error during encoding, the allocated sd_ndr.data won't be freed and causes memory leak. Move kfree(sd_ndr.data) into out label to ensure the buffer gets released on all success and error return paths.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 303fff2b8c77a85c62dbde3b27c24b084144c04c before 306d6f370da7e0e5532dc51c972f4ce101e42431; from 303fff2b8c77a85c62dbde3b27c24b084144c04c before dc55270e410ccb4d24e637c13b5c4c25bcd106d7; from 303fff2b8c77a85c62dbde3b27c24b084144c04c before c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e; 303fff2b8c77a85c62dbde3b27c24b084144c04c builds before 9b4dec75498fd0a1c9eaea680aef59c9519eb16f; from 303fff2b8c77a85c62dbde3b27c24b084144c04c before c521dd78e036b5e0cfd394dd2ff2218890dd9e41; from 303fff2b8c77a85c62dbde3b27c24b084144c04c before d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7 | CNA record |
References
- https://git.kernel.org/stable/c/306d6f370da7e0e5532dc51c972f4ce101e42431
- https://git.kernel.org/stable/c/dc55270e410ccb4d24e637c13b5c4c25bcd106d7
- https://git.kernel.org/stable/c/c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e
- https://git.kernel.org/stable/c/9b4dec75498fd0a1c9eaea680aef59c9519eb16f
- https://git.kernel.org/stable/c/c521dd78e036b5e0cfd394dd2ff2218890dd9e41
- https://git.kernel.org/stable/c/d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.