CVE-2026-93812
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr ndr_encode_v4_ntacl() allocates sd_ndr.data via kzalloc() at entry. If any subsequent ndr_write_*() call returns error during encoding, the allocated sd_ndr.data won't be freed and causes memory leak. Move kfree(sd_ndr.data) into out label to ensure the buffer gets released on all success and error return paths.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 24, 2026
First seenSep 24, 2026
How to fix
Update
- Linux Linux306d6f370da7e0e5532dc51c972f4ce101e42431, dc55270e410ccb4d24e637c13b5c4c25bcd106d7, c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e, 9b4dec75498fd0a1c9eaea680aef59c9519eb16f, c521dd78e036b5e0cfd394dd2ff2218890dd9e41, d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < 306d6f370da7e0e5532dc51c972f4ce101e42431, 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < dc55270e410ccb4d24e637c13b5c4c25bcd106d7, 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e, 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < 9b4dec75498fd0a1c9eaea680aef59c9519eb16f, 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < c521dd78e036b5e0cfd394dd2ff2218890dd9e41, 303fff2b8c77a85c62dbde3b27c24b084144c04c ≤ v < d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7, 5.15 | 306d6f370da7e0e5532dc51c972f4ce101e42431, dc55270e410ccb4d24e637c13b5c4c25bcd106d7, c866c3314a6853eb06c7a8bef67f43c8a8bdfb6e, 9b4dec75498fd0a1c9eaea680aef59c9519eb16f, c521dd78e036b5e0cfd394dd2ff2218890dd9e41, d4d56b00c7df88cd5751e7415bdfabc9fdbc82a7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.