CVE-2026-99272 | Linux Kernel up to 7.3.1 smb SMB2_read DataOffset/DataLength out-of-bounds

November 7, 2026 Yanac

A vulnerability identified as critical has been detected in Linux Kernel up to 7.3.1. This issue affects the function SMB2_read of the component smb. The manipulation of the argument DataOffset/DataLength leads to out-of-bounds read.

This vulnerability is listed as CVE-2026-99272. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More