CVE-2026-52967

A flaw was found in the Linux kernel's Server Message Block (SMB) client. This vulnerability, located in the symlink_data() function, could allow a malicious SMB server to trigger an infinite loop, leading to a Denial of Service (DoS) condition. Additionally, an out-of-bounds read could occur, potentially leading to information disclosure.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires a client to actively connect and mount a share from a malicious or compromised SMB server. Under typical enterprise deployments, SMB client connections are directed to trusted internal file servers rather than untrusted remote endpoints. While processing crafted symlink error responses from an attacker-controlled server can trigger a client-side denial of service or out-of-bounds read, it does not grant direct arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.