CVE-2026-52967 Details
Description
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read in symlink_data() On 32-bit architectures, the infinite loop is as follows: len = p->ErrorDataLength == 0xfffffff8 u8 *next = p->ErrorContextData + len next == p On 32-bit architectures, the out-of-bounds read is as follows: len = p->ErrorDataLength == 0xfffffff0 u8 *next = p->ErrorContextData + len next == (u8 *)p - 8
A vulnerability in the Linux kernel's SMB client has been fixed, addressing a potential infinite loop and out-of-bounds read in the 'symlink_data' function. This issue was present in the stable branch of the Linux kernel. On 32-bit architectures, the infinite loop occurred when the 'ErrorDataLength' was set to a specific value, causing the function to loop indefinitely. The out-of-bounds read was triggered under similar conditions, allowing the function to read memory outside of its allocated bounds.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version can be found in the Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1b9331b16b0ed9414dcf7583d8134bdfeb117aae | kernel.org | Patch |
| https://git.kernel.org/stable/c/1cfa2d59f669db28d6292d10ff87ca6837c781b0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d9a7f1f96cd617ee9e75bb22217c709038e26b8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/97a05b0ae9ea5ec052be2eef0f9cc7ce03501bbb | kernel.org | Patch |
| https://git.kernel.org/stable/c/b41598bf54b3fe528994e573df6008f8f4d0a4f4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cd4b9b662f0fb9aa97ee6bf9034eca76fc6cab23 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.0.16, < 6.1.175 >= 6.2, < 6.6.141 >= 6.7, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 24, 2026 | New CVE Received | kernel.org |