CVE-2026-72310

A flaw was found in the Linux kernel's Server Message Block (SMB) client. A malicious SMB server could exploit an integer overflow vulnerability in the smb2_ioctl_query_info() function's bounds check. By sending a specially crafted response with a large offset, the server can cause the client to read data beyond the allocated buffer. This out-of-bounds read could lead to information disclosure from the kernel memory.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires a client system to connect to a compromised or malicious SMB server and trigger passthrough ioctl queries. The flaw results in an out-of-bounds read leading to kernel memory disclosure rather than code execution or system compromise. Typical enterprise configurations communicating strictly with trusted, authenticated internal SMB infrastructure face significantly lower exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.