Skip to content
Heist/ feed
Back to feed
Unrated

CVE-2026-93801 affecting package kernel 6.6.157.1-1

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

Products
kernel
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-93801
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 17:42 UTC · Revision 1

Source evidence

CVE-2026-93801 affecting package kernel 6.6.157.1-1

core-osv · Original source

Published 24 Sept 2026, 17:17 UTC

In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.

osv:AZL-103775

kernel

Fixed versions: Not specified

Complete source record
{
  "id": "b5a5a30b309a1df6440ca1daa8e5c7440a002c5b7c66087c71acf8470e66a6c2",
  "url": "https://osv.dev/vulnerability/AZL-103775",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2026-93801 affecting package kernel 6.6.157.1-1",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data Stack-allocated cifs_open_info_data may contain random data. This can make some fields have wrong value if they are not set later.",
    "evidence": "osv:AZL-103775",
    "products": [
      {
        "name": {
          "value": "kernel",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "AZL-103775",
      "aliases": [
        "AZL-103775"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "last_affected": "6.6.157.1-1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel",
            "purl": "pkg:rpm/azure-linux/kernel",
            "ecosystem": "Azure Linux:3"
          },
          "database_specific": {
            "source": "https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103775.json"
          }
        }
      ],
      "modified": "2026-10-22T05:35:55Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-93801"
      ],
      "references": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-93801"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-93801",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 404415,
  "published_at": "2026-09-24T17:17:13+00:00"
}