CVE-2026-93785EPSS p6.0%
CVE-2026-93785CVE-2026-93785
Description
In the Linux kernel, the following vulnerability has been resolved:
cifs: validate idmap key payload length
The cifs.idmap key type stores its payload length in key->datalen, which
is limited to U16_MAX. Accepting a larger key payload truncates the
recorded length and can make later users interpret the payload using
inconsistent bounds.
Reject oversized preparsed payloads before allocating or copying them.
This keeps key->datalen consistent with the stored data for both inline
and separately allocated idmap payloads.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 6.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-10-03 |