CVE-2026-90166 PUBLISHED

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

See the procedure below:

ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check share->name ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to 4eb74a34ea401abfbbd5991076715dae3de938df (excl.)
  • affected from e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to 8461f27902727ad434375caf13a0100aafc0340f (excl.)
  • affected from e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to 7065d3648b1a48d2c49da3d6364dd3c4d503b10c (excl.)
  • affected from e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to d2ccf905f47d2344270749f4dfa905afcd3edeb0 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.15 is affected
  • unaffected from 0 to 5.15 (excl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References