CVE-2026-98114

A flaw was found in the Linux kernel's ksmbd server. The Discretionary Access Control List (DACL) parsing logic silently ignores errors caused by truncated access control entries and memory allocation failures, allowing the system to continue with an incomplete permission conversion. A remote attacker could exploit this vulnerability by submitting malformed security descriptors over SMB (Server Message Block), leading to incorrect file permissions and improper access control.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.