CVE-2026-99275 | Linux Kernel SMB Client smb2_check_message/decode_ntlmssp_challenge SecurityBufferOffset/SecurityBufferLength out-of-bounds

A vulnerability, which was classified as problematic, was found in Linux Kernel. Affected by this vulnerability is the function smb2_check_message/decode_ntlmssp_challenge of the component SMB Client. The manipulation of the argument SecurityBufferOffset/SecurityBufferLength results in out-of-bounds read.

This vulnerability is known as CVE-2026-99275. It is possible to launch the attack remotely. No exploit is available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More