Threats tagged 'ghsa-69w5-4c2f-pfhh'

CVE-2026-89794 is a vulnerability in the Linux kernel's ksmbd component related to zero pipe read compound padding. The issue arises because smb2_read_pipe() allocates only the payload size without accounting for alignment padding, potentially exposing up to seven bytes of uninitialized kernel heap memory. The vulnerability has been resolved by allocating the aligned size and clearing the unused tail before pinning the response buffer.