Vulnerabilities

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix…

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receive_encrypted_standard()'s handling of compound encrypted frames: - Clear next_buffer after assigning it to server->bigbuf. A stale next_buffer pointer can lead to a use-after-free on subsequent error paths. - Update pdu_length to the decrypted plaintext size (buf_size). Using the pre-decryption length allows NextCommand to point into stale ciphertext residue. - Reject next

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Linux kernel

Product

Linux kernel

Fix

available

Exposure class

Operating system

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-98171 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count…

   Fix available CVE-2026-98226 Linux kernel
2. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem With…

   Fix available CVE-2026-98225 Linux kernel
3. 23
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob_len encrypted_key_alloc()…

   Fix available CVE-2026-98222 Cisco
4. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary…

   Fix available CVE-2026-98221 Linux kernel
5. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths When the root…

   Fix available CVE-2026-98220 Linux kernel
6. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2c_atr_add_adapter()…

   Fix available CVE-2026-98218 Linux kernel
7. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: IB/mlx4: Fix use-after-free on pkey sysfs registration failure…

   Fix available CVE-2026-98217 Linux kernel
8. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIO_CRED credit-return mmap hfi1_file_mmap()'s PIO_CRED case…

   Fix available CVE-2026-98216 Linux kernel
9. 16
   CVE NVD 26d ago

   In the Linux kernel, the following vulnerability has been resolved: mmc: hsq: Fix use-after-free in retry work mmc_hsq_pump_requests() queues…

   Fix available CVE-2026-98212 Linux kernel
10. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500_busy_complete() can…

    Fix available CVE-2026-98211 Linux kernel
11. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: mmc: sdio_uart: fix xmit_fifo leak when the port table is full…

    Fix available CVE-2026-98208 Linux kernel
12. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls…

    Fix available CVE-2026-98196 Linux kernel
13. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: fix broadcast stations deallocation On the error path of…

    Fix available CVE-2026-98195 Linux kernel
14. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown…

    Fix available CVE-2026-98192 Linux kernel
15. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames…

    Fix available CVE-2026-98190 Linux kernel
16. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()…

    Fix available CVE-2026-98189 Linux kernel
17. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info()…

    Fix available CVE-2026-98175 Linux kernel
18. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is…

    Fix available CVE-2026-98174 Linux kernel
19. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_try_adding_channels()…

    Fix available CVE-2026-98173 Linux kernel
20. 16
    CVE NVD 26d ago

    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an…

    Fix available CVE-2026-98172 Linux kernel