Threats tagged 'ghsa-fpg3-37rc-jhfw'

CVE-2026-98114 is a medium severity vulnerability in the Linux kernel's ksmbd component related to improper handling of DACL parsing errors. The parse_dacl() function previously accepted truncated Access Control Entries (ACEs) and allocation failures silently, which could lead to incomplete Access Control List (ACL) conversions. This flaw allowed set_info_sec() to proceed with malformed security descriptors, potentially causing issues with inode attributes or ACL extended attributes. The vulnerability has been resolved by ensuring that parsing and allocation errors are properly propagated and malformed security descriptors are rejected before updates occur.