Critical severity9.1NVD Advisory· Published Aug 10, 2026· Updated Aug 19, 2026
CVE-2026-68343
CVE-2026-68343
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: validate DFS referral PathConsumed
parse_dfs_referrals() validates that the response contains the fixed referral entry array and, on for-next, the per-referral string offsets. However, the response also contains a PathConsumed value that is later used for DFS path parsing.
If a malformed response provides a PathConsumed value larger than the search name, later DFS parsing can advance beyond the end of the path.
Validate PathConsumed against the search name length before storing it in the parsed referral.
Affected products
77- osv-coords76 versionspkg:linux/kernelpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rv
>= 4.11.0, < 6.1.183+ 75 more
- (no CPE)range: >= 4.11.0, < 6.1.183
- (no CPE)range: < 4.18.0-553.160.1.el8_10
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
- (no CPE)range: < 5.14.0-687.41.1.el9_8
Patches
Vulnerability mechanics
References
6- git.kernel.org/stable/c/285bd4a5f3f156aa5869843b47a1b1380b774241nvd
- git.kernel.org/stable/c/2fdd6d196c656b376cc251e1e9ff110b3ed522e1nvd
- git.kernel.org/stable/c/5b439f39f33ec15d319ced3b025e122346fba987nvd
- git.kernel.org/stable/c/9f88a99ed511651b2dc2177d6854b2d1b8322e75nvd
- git.kernel.org/stable/c/bfebe5110fd135d86d65a0a346e14c106b02028bnvd
- git.kernel.org/stable/c/f6f5ee2aa33b350c671721b965251c42cebb962envd
News mentions
0No linked articles in our index yet.