Riskcovery

CVE-2026-90166

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 30, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

See the procedure below:

ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check `share->name` ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before d601be98c9445894c759c28d4a7a52151387f1fbAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 5ffd180307a5ea34dae7f90ff9573ebed6b7fb12Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 4eb74a34ea401abfbbd5991076715dae3de938dfAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 8461f27902727ad434375caf13a0100aafc0340fAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 7065d3648b1a48d2c49da3d6364dd3c4d503b10cAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before d2ccf905f47d2344270749f4dfa905afcd3edeb0Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.