CVE-2026-93801

CVE-2026-93801

High · published September 24, 2026

CVSS v3.1
7.0
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb/client: zero-initialize stack-allocated cifs_open_info_data

Stack-allocated cifs_open_info_data may contain random data.

This can make some fields have wrong value if they are not set later.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Published
2026-09-24T21:17Z
References (4)
https://git.kernel.org/stable/c/22532dd88694ed20bdd47523ffa709f166ce776b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2c5db82778f560121efda9e052e2f19c2d807c1b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/74ff47e6c4213fcfeba2de448d9cbda200507d22 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/8fce4cf4369c766a3293a05419500cbfde72e60d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 16:02Z
    smb/client: zero-initialize stack-allocated cifs_open_info_data
    cvelistv5