CVE-2026-98170

Published 6 October 2026 · tracked since 7 October 2026

Description

In the Linux kernel, the following vulnerability has been resolved:smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()In move_smb2_ea_to_cifs(), the while (src_size > 0) loop condition is insufficient. It allows iteration to continue even if the remaining src_size is too small to c

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-98202
• CVE-2026-98203
• CVE-2026-98204
• CVE-2026-98196
• CVE-2026-98197
• CVE-2026-98198
• CVE-2026-98199
• CVE-2026-98200
• CVE-2026-98201
• CVE-2026-98189

→ Open the live CVE board · all tools