CVE Explorer

CVE-2026-52967

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read in symlink_data() On 32-bit architectures, the infinite loop is as follows: len = p->ErrorDataLength == 0xfffffff8 u8 *next = p->ErrorContextData + len next == p On 32-bit architectures, the out-of-bounds read is as follows: len = p->ErrorDataLength == 0xfffffff0 u8 *next = p->ErrorContextData + len next == (u8 *)p - 8

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ee59fdd8d28d2613c22e6607a7536a3242d1d976092ecfe12be3cb7e1758029b

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/smb2file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.91","versionType":"semver"},{"lessThanO…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/smb2file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1cfa2d59f669db28d6292d10ff87ca6837c781b0","status":"affected","version":"76894f3e2f71177747b8b4763fb180e800279585","versionType":"git"},{"lessThan":"b41598bf54b3fe528994e573df6008f8f4d0a4f4","status":"affected","version":"76894f3e2f71177747b8b4763fb180e800279585","versionType":"git"},{"lessThan":"cd4b9b662f0fb9aa97ee6bf9034eca76fc6cab23","status":"affected","version":"76894f3e2f71177747b8b…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/1b9331b16b0ed9414dcf7583d8134bdfeb117aae"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/1cfa2d59f669db28d6292d10ff87ca6837c781b0"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/7d9a7f1f96cd617ee9e75bb22217c709038e26b8"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/97a05b0ae9ea5ec052be2eef0f9cc7ce03501bbb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/b41598bf54b3fe528994e573df6008f8f4d0a4f4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/cd4b9b662f0fb9aa97ee6bf9034eca76fc6cab23"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:bd563ee1a806f81755e6cf15e39d48be965bd3c9b0bda6fb707bc16fdb9c6563 · sha256:6cac4b7d5296fa40… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer