CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data()
In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix possible infinite loop and oob read in symlinkdata()
On 32-bit architectures, the infinite loop is as follows:
len = p->ErrorDataLength == 0xfffffff8 u8 next = p->ErrorContextData + len next == p
On 32-bit architectures, the out-of-bounds read is as follows:
len = p->ErrorDataLength == 0xfffffff0 u8 next = p->ErrorContextData + len next == (u8 )p - 8
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52967?
CVE-2026-52967 has a risk score of 27, indicating a high severity level.
How do I fix CVE-2026-52967?
To fix CVE-2026-52967, update to the latest version of the Linux kernel that includes the patch for this vulnerability.
What platforms are affected by CVE-2026-52967?
CVE-2026-52967 affects the Linux kernel on 32-bit architectures.
What are the potential consequences of CVE-2026-52967?
The consequences of CVE-2026-52967 include a possible infinite loop and out-of-bounds read, which can lead to denial of service or information leakage.
How can I determine if my system is vulnerable to CVE-2026-52967?
You can determine if your system is vulnerable to CVE-2026-52967 by checking your current Linux kernel version against the version containing the fix.