Threats tagged 'ghsa-vfwc-r92w-jp29'

CVE-2026-97554 is a vulnerability in the Linux kernel SMB client where uninitialized Security Identifiers (SIDs) may be used in the cifs_posix_to_fattr() function. This occurs because the function ignores the failure return value of posix_info_parse(), leading to potential leakage of kernel stack memory to userspace when parsing malformed POSIX directory entries from untrusted servers. The issue is fixed by checking the return value and skipping SID-to-id mapping on parse failure.