CVE-2026-98113

ksmbd: rate limit unmapped SID errors

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: rate limit unmapped SID errors

A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages.

Rate limit the message to prevent an authenticated client from flooding the kernel log.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 3005d43143096321cc857645a9d48ef4ffde8bcfAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 674aabf554bdaffcf25f145bf32c8b4f510f7916Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 486876f957456721b5e51af532235db4c6f7bd47Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 13af319c1efec0b45fb5c1b16830eb0888b3fd1eAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 30dbb08777b9a611d7d9193c040f382fbd0e7562Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 54cb2a909996346ac6a8a3beac96c07b3dcba584Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before feca5e70fc963b088377b20879e8cd8237c2fd7dAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.