CVE-2026-90170

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability occurs because the ipc_validate_msg() function reads length fields from an Inter-Process Communication (IPC) response buffer before verifying if the buffer is large enough. A local attacker, by providing a specially crafted short IPC response, can trigger an out-of-bounds read. This can lead to a system crash, resulting in a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.