{"id":"CVE-2026-93785","summary":"cifs: validate idmap key payload length","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: validate idmap key payload length\n\nThe cifs.idmap key type stores its payload length in key-\u003edatalen, which\nis limited to U16_MAX.  Accepting a larger key payload truncates the\nrecorded length and can make later users interpret the payload using\ninconsistent bounds.\n\nReject oversized preparsed payloads before allocating or copying them.\nThis keeps key-\u003edatalen consistent with the stored data for both inline\nand separately allocated idmap payloads.","modified":"2026-10-26T17:26:59.655734731Z","published":"2026-09-24T16:02:18.964Z","related":["openSUSE-SU-2026:22167-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93785.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/125b05ac8ca8758950e4369c1542d57a162f504c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3a4a34a732e8a08309eed0a74314dbd9f2f1c972"},{"type":"WEB","url":"https://git.kernel.org/stable/c/455488cd5054bcc59db40fa1cc2c004031a5b2a5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6cfeef221ac00d63c07f6122f58e6159bde69ca0"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8b12f65d7caf16d124098cb4895a203367d35b57"},{"type":"WEB","url":"https://git.kernel.org/stable/c/945f6cde6bcf8f08f6fa5df8882b1b9582e55efa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/eeac976b74b4f697cfc517187b7cbfd72652dbbc"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93785.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93785"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"21fed0d5b763b94a7d1568c27d0cce892ab8d43e"},{"fixed":"eeac976b74b4f697cfc517187b7cbfd72652dbbc"},{"fixed":"125b05ac8ca8758950e4369c1542d57a162f504c"},{"fixed":"945f6cde6bcf8f08f6fa5df8882b1b9582e55efa"},{"fixed":"3a4a34a732e8a08309eed0a74314dbd9f2f1c972"},{"fixed":"6cfeef221ac00d63c07f6122f58e6159bde69ca0"},{"fixed":"8b12f65d7caf16d124098cb4895a203367d35b57"},{"fixed":"455488cd5054bcc59db40fa1cc2c004031a5b2a5"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93785.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-93785.json"}}],"schema_version":"1.9.2"}