CVE-2026-93812

ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 18, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr

ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry. If any subsequent ndr_write_*() call returns error during encoding, the allocated sd_ndr.data won't be freed and causes memory leak.

Move kfree(sd_ndr.data) into out label to ensure the buffer gets released on all success and error return paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	303fff2b8c77a85c62dbde3b27c24b084144c04c to before 306d6f370da7e0e5532dc51c972f4ce101e42431Affected 303fff2b8c77a85c62dbde3b27c24b084144c04c to before dc55270e410ccb4d24e637c13b5c4c25bcd106d7Affected 303fff2b8c77a85c62dbde3b27c24b084144c04c to before c866c3314a6853eb06c7a8bef67f43c8a8bdfb6eAffected 303fff2b8c77a85c62dbde3b27c24b084144c04c to before 9b4dec75498fd0a1c9eaea680aef59c9519eb16fAffected 303fff2b8c77a85c62dbde3b27c24b084144c04c to before c521dd78e036b5e0cfd394dd2ff2218890dd9e41Affected 303fff2b8c77a85c62dbde3b27c24b084144c04c to before d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7Affected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

303fff2b8c77a85c62dbde3b27c24b084144c04c to before 306d6f370da7e0e5532dc51c972f4ce101e42431Affected
303fff2b8c77a85c62dbde3b27c24b084144c04c to before dc55270e410ccb4d24e637c13b5c4c25bcd106d7Affected
303fff2b8c77a85c62dbde3b27c24b084144c04c to before c866c3314a6853eb06c7a8bef67f43c8a8bdfb6eAffected
303fff2b8c77a85c62dbde3b27c24b084144c04c to before 9b4dec75498fd0a1c9eaea680aef59c9519eb16fAffected
303fff2b8c77a85c62dbde3b27c24b084144c04c to before c521dd78e036b5e0cfd394dd2ff2218890dd9e41Affected
303fff2b8c77a85c62dbde3b27c24b084144c04c to before d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7Affected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.