CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
In the Linux kernel, the following vulnerability has been resolved:
fs/smb/client: fix out-of-bounds read in cifssanitizeprepath
When cifssanitizeprepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check (cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read.
This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL.
The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43112?
CVE-2026-43112 is classified as a moderate severity vulnerability due to its potential for causing an out-of-bounds read.
How do I fix CVE-2026-43112?
To address CVE-2026-43112, update your Linux kernel to a version that contains the patch for this vulnerability.
What versions of the Linux kernel are affected by CVE-2026-43112?
CVE-2026-43112 affects various versions of the Linux kernel ranging from 5.16 to 6.19.
What is the impact of CVE-2026-43112?
The impact of CVE-2026-43112 could lead to sensitive information disclosure through an out-of-bounds read.
When was CVE-2026-43112 disclosed?
CVE-2026-43112 was disclosed in conjunction with updates to the Linux kernel addressing this security issue.