CVE-2026-23282
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/03/2026
Last modified:
25/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
smb: client: fix oops due to uninitialised var in smb2_unlink()<br />
<br />
If SMB2_open_init() or SMB2_close_init() fails (e.g. reconnect), the<br />
iovs set @rqst will be left uninitialised, hence calling<br />
SMB2_open_free(), SMB2_close_free() or smb2_set_related() on them will<br />
oops.<br />
<br />
Fix this by initialising @close_iov and @open_iov before setting them<br />
in @rqst.



