https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T05:26:53.054983+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-98114 CVE-2026-98114 — ksmbd: propagate DACL parsing errors 2026-09-29T05:26:53.066148+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: propagate DACL parsing errors

parse_dacl() silently accepts truncated ACEs and allocation failures, allowing set_info_sec() to continue with an incomplete ACL conversion.

Return parsing and allocation errors to parse_sec_desc() so malformed security descriptors are rejected before inode attributes or ACL xattrs are updated.