CVE-2026-93785

Status: UPDATED  |  Advisory ID: CVE-2026-93785

Key Details

Affected Products, Subsystems & Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

cifs: validate idmap key payload length

The cifs.idmap key type stores its payload length in key->datalen, which

is limited to U16_MAX. Accepting a larger key payload truncates the

recorded length and can make later users interpret the payload using

inconsistent bounds.

Reject oversized preparsed payloads before allocating or copying them.

This keeps key->datalen consistent with the stored data for both inline

and separately allocated idmap payloads. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References