In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix buffer validation by including null terminator size in EA length
The smb2_set_ea function, which handles Extended Attributes (EA), was performing buffer validation checks that incorrectly omitted the size of the null terminating character (+1 byte) for EA Name. This patch fixes the issue by explicitly adding '+ 1' to EaNameLength where the null terminator is expected to be present in the buffer, ensuring the validation accurately reflects the total required buffer size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1052-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1052-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-110-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-6.8.0-1054-gcp-fipsUpgrade linux-image-aws-64k-6.17Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1050-gke-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.17Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-awsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1049-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.17Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1022-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-6.8.0-1059-azureUpgrade linux-image-6.8.0-110-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-2042-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.17Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1051-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1054-gcp-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1051-ibmUpgrade linux-image-6.8.1-1047-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1051-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-110-lowlatencyUpgrade linux-image-6.8.0-1051-nvidia-64kUpgrade linux-image-6.8.0-1037-gkeopUpgrade linux-image-6.17.0-1020-oemUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1050-gkeUpgrade linux-image-raspi-6.17Upgrade linux-image-oem-24.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-6.8.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1054-azure-fipsUpgrade linux-image-6.8.0-1054-azureUpgrade linux-image-6.8.0-1052-aws-64kUpgrade linux-image-6.8.0-1054-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1051-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-6.17Upgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-110-genericUpgrade linux-image-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1052-aws-fipsUpgrade linux-image-6.8.0-1022-nvidia-tegraUpgrade linux-image-6.8.0-1049-oracleUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8 | Apr 17, 2026 | Jan 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub