CVE-2026-23282

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/03/2026
Last modified:
25/03/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> smb: client: fix oops due to uninitialised var in smb2_unlink()<br /> <br /> If SMB2_open_init() or SMB2_close_init() fails (e.g. reconnect), the<br /> iovs set @rqst will be left uninitialised, hence calling<br /> SMB2_open_free(), SMB2_close_free() or smb2_set_related() on them will<br /> oops.<br /> <br /> Fix this by initialising @close_iov and @open_iov before setting them<br /> in @rqst.

Impact