CVE-2026-93801: smb/client: zero-initialize stack-allocated cifs_open_info_data
In the Linux kernel, the following vulnerability has been resolved:
smb/client: zero-initialize stack-allocated cifsopeninfodata
Stack-allocated cifsopeninfodata may contain random data. This can make some fields have wrong value if they are not set later.
Affected Software
Event History
Frequently Asked Questions
What systems are affected?
The issue affects the SMB client component in the Linux kernel. Systems that do not use the kernel SMB/CIFS client are not indicated as affected by the available information.
What causes the incorrect behavior?
A stack-allocated cifs_open_info_data structure may contain uninitialized random data. Fields that are not subsequently assigned can therefore retain incorrect values.
How can the issue be remediated?
Apply a Linux kernel update containing the upstream stable fix referenced in the advisory. The available information does not identify affected or fixed kernel version numbers.