{"id":"CVE-2026-98114","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: propagate DACL parsing errors\n\nparse_dacl() silently accepts truncated ACEs and allocation failures,\nallowing set_info_sec() to continue with an incomplete ACL c…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: propagate DACL parsing errors\n\nparse_dacl() silently accepts truncated ACEs and allocation failures,\nallowing set_info_sec() to continue with an incomplete ACL c…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 461f10a5297e85b7c1cd21838922f2e57b934d2d","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 37952f03d5171eb3a33b2abc2cf6e456d69ff4a1","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < a04dac1f2cffe9533f4260f0659297d805e69194","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < c61dc7b1b4a3234b4aa3965502908a292238805c","Linux 5.15"],"published":"2026-09-25","updated":"2026-09-25","sourceUpdated":"2026-09-25T11:17:42.560","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-98114","references":[{"url":"https://git.kernel.org/stable/c/37952f03d5171eb3a33b2abc2cf6e456d69ff4a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/461f10a5297e85b7c1cd21838922f2e57b934d2d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/a04dac1f2cffe9533f4260f0659297d805e69194","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c61dc7b1b4a3234b4aa3965502908a292238805c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-25T11:06:38.822Z","slug":"CVE-2026-98114","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: propagate DACL parsing errors\n\nparse_dacl() silently accepts truncated ACEs and allocation failures,\nallowing set_info_sec() to continue with an incomplete ACL conversion.\n\nReturn parsing and allocation errors to parse_sec_desc() so malformed\nsecurity descriptors are rejected before inode attributes or ACL xattrs\nare updated.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}