CVE-2026-90166
NoneCVSS
—
EPSS
0.2%
Published
Sep 17, 2026
CISA due date
—
The record
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request() See the procedure below: ksmbd_tree_conn_connect ksmbd_share_config_get share->name = kstrdup() // fail if (!test_share_config_flag(share, KSMBD_SHARE_FLAG_PIPE)) // false // do not check `share->name` ksmbd_ipc_tree_connect_request strlen(share->name) // null-ptr-deref
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|