CVE-2026-99113

A flaw was found in the Linux kernel's ksmbd Server Message Block (SMB) file server. When handling compound file system query requests, the server fails to clear the response buffer before populating it. A remote client can exploit this vulnerability by sending specially crafted compound requests to trigger an information disclosure, exposing residual memory contents that may include data from prior restricted operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.