CVE-2026-93785

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-93785
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93785.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-93785
Downstream
Published
2026-09-24T16:02:18Z
Modified
2026-10-05T02:30:29Z
Summary
cifs: validate idmap key payload length
Details

In the Linux kernel, the following vulnerability has been resolved:

cifs: validate idmap key payload length

The cifs.idmap key type stores its payload length in key->datalen, which is limited to U16_MAX. Accepting a larger key payload truncates the recorded length and can make later users interpret the payload using inconsistent bounds.

Reject oversized preparsed payloads before allocating or copying them. This keeps key->datalen consistent with the stored data for both inline and separately allocated idmap payloads.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93785.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
21fed0d5b763b94a7d1568c27d0cce892ab8d43e
Fixed
eeac976b74b4f697cfc517187b7cbfd72652dbbc
Fixed
125b05ac8ca8758950e4369c1542d57a162f504c
Fixed
945f6cde6bcf8f08f6fa5df8882b1b9582e55efa
Fixed
3a4a34a732e8a08309eed0a74314dbd9f2f1c972
Fixed
6cfeef221ac00d63c07f6122f58e6159bde69ca0
Fixed
8b12f65d7caf16d124098cb4895a203367d35b57
Fixed
455488cd5054bcc59db40fa1cc2c004031a5b2a5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93785.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.2.0
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-93785.json"