CVE-2026-93801

smb/client: zero-initialize stack-allocated cifs_open_info_data

State: Published
Severity: 7.0 High
Published: Sep 24, 2026
Updated: Oct 21, 2026
Reserved: Sep 18, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/client: zero-initialize stack-allocated cifs_open_info_data

Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Scores

CVSS	Score	Vector	Source
3.1	7.0 High	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	436cfdbc57d98808fce427d9a8d97691374989b3 to before 2c5db82778f560121efda9e052e2f19c2d807c1bAffected fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 to before 74ff47e6c4213fcfeba2de448d9cbda200507d22Affected 057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 22532dd88694ed20bdd47523ffa709f166ce776bAffected 057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 8fce4cf4369c766a3293a05419500cbfde72e60dAffected 83d3bc866530a36a465b47cce4d2a9def2411960Affected 6.6.113 to before 6.6.160Affected 6.12.54 to before 6.12.111Affected 6.17.4 to before 6.18Affected
LinuxLinux	6.18Affected before 6.18Not affected 6.6.160 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

436cfdbc57d98808fce427d9a8d97691374989b3 to before 2c5db82778f560121efda9e052e2f19c2d807c1bAffected
fc2f2011d3d84b56f536b4a25a4bb2fa1b13d520 to before 74ff47e6c4213fcfeba2de448d9cbda200507d22Affected
057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 22532dd88694ed20bdd47523ffa709f166ce776bAffected
057ac50638bcece64b3b436d3a61b70ed6c01a34 to before 8fce4cf4369c766a3293a05419500cbfde72e60dAffected
83d3bc866530a36a465b47cce4d2a9def2411960Affected
6.6.113 to before 6.6.160Affected
6.12.54 to before 6.12.111Affected
6.17.4 to before 6.18Affected

LinuxLinux

6.18Affected
before 6.18Not affected
6.6.160 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.