2.3

CVE-2026-97554: linux

CVSS: 2.3v4.0LowReceived
AliasesUBUNTU-CVE-2026-97554DEBIAN-CVE-2026-97554
Published 25-09-2026Last modified 21-10-2026
Open JSON

Vulnerability summary

CVE-2026-97554 is a low (CVSS 2.3) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9% of scored vulnerabilities.

Overall risk
9/100
0100
Minimal · default modelHow is this calculated?
CVSS score
2.3/10
010
Low · v4.0 (OSV · Ubuntu), selected by version preference
EPSS score
0.20%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12074-1

Timeline

  1. 25-09-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() cifs_posix_to_fattr() ignores the return value of posix_info_parse(). When a malformed POSIX directory entry is encountered (e.g. invalid SID lengths from an untrusted server), posix_info_parse() returns -1 without populating the 'parsed' struct. The uninitialized stack memory in parsed.owner and parsed.group is then passed to sid_to_id(), which processes the garbage bytes and passes them to request_key() to construct a SID string, potentially leaking kernel stack contents to the userspace idmap daemon. Fix this by checking the return value and skipping the SID-to-id mapping when parsing fails. The remaining fattr fields (timestamps, mode, etc.) are populated directly from the 'info' pointer so they are unaffected.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

26-09-202621-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 7.2.7-1
Linux1 product
  • linux≥ 9934430e2178d5164eb1ac91a9b092f9e7e64745, < 604feb3e8141bf11f5afd48d36d401fee5af9536 | ≥ 9934430e2178d5164eb1ac91a9b092f9e7e64745, < 33106019c3be57b5fc6411cfaad6d98214a51265 | ≥ 9934430e2178d5164eb1ac91a9b092f9e7e64745, < 2be31f252ade791b84f7164991f14436aed1d4b9 | ≥ 9934430e2178d5164eb1ac91a9b092f9e7e64745, < c9a8b60ce140a68d172452f418137fc7ddbae7db | ≥ 9934430e2178d5164eb1ac91a9b092f9e7e64745, < da6e25842431982d5a53cf00d925b98c690f4467 | dd80b98bdf0a4b3206739f3513b0518f27a7b4ef | d8e39c11f66125f49de55537a6efc8ecadf4a0f7 | ≥ 5.8.17, < 5.9 | ≥ 5.9.2, < 5.10 | 5.10

3 vendors · 171 products

References

8 links