CVE-2026-52967

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-52967
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52967.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-52967
Downstream
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (1)
openSUSE (1)
ROOT (2)
SUSE (16)
UBUNTU (1)
Related
openSUSE (1)
SUSE (16)
Published
2026-06-24T16:28:46Z
Modified
2026-10-17T02:30:38Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H CVSS Calculator
Summary
smb/client: fix possible infinite loop and oob read in symlink_data()
Details

In the Linux kernel, the following vulnerability has been resolved:

smb/client: fix possible infinite loop and oob read in symlink_data()

On 32-bit architectures, the infinite loop is as follows:

len = p->ErrorDataLength == 0xfffffff8 u8 *next = p->ErrorContextData + len next == p

On 32-bit architectures, the out-of-bounds read is as follows:

len = p->ErrorDataLength == 0xfffffff0 u8 *next = p->ErrorContextData + len next == (u8 *)p - 8

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52967.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
76894f3e2f71177747b8b4763fb180e800279585
Fixed
1cfa2d59f669db28d6292d10ff87ca6837c781b0
Fixed
b41598bf54b3fe528994e573df6008f8f4d0a4f4
Fixed
cd4b9b662f0fb9aa97ee6bf9034eca76fc6cab23
Fixed
97a05b0ae9ea5ec052be2eef0f9cc7ce03501bbb
Fixed
1b9331b16b0ed9414dcf7583d8134bdfeb117aae
Fixed
7d9a7f1f96cd617ee9e75bb22217c709038e26b8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.0.16
Fixed
6.1
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2d046892a493d9760c35fdaefc3017f27f91b621

Affected versions

v6.*
v6.0.16
v6.0.17
v6.0.18
v6.0.19

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52967.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.1.0
Fixed
6.1.175
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.141
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.91
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.33
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.10

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52967.json"