Threats tagged 'ghsa-2c6m-5vjc-xqc6'

A high-severity vulnerability (CVE-2026-98169) in the Linux kernel SMB client was fixed to address a potential out-of-bounds (OOB) read in the smb3_enum_snapshots() function. The flaw occurs when the server's reply is shorter than expected, causing the kernel to read beyond allocated buffer limits and leak adjacent memory to userspace. The fix rejects replies shorter than the expected struct size, preventing this memory leak.