AZL-102218
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-102218.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-102218
- Upstream
- Published
- 2026-09-17T17:17:09Z
- Modified
- 2026-09-18T14:17:49Z
- Summary
- CVE-2026-90166 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
See the procedure below:
ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check
share->nameksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref - References