Vulnerability · Published May 6, 2026 · Assigned by Linux

CVE-2026-43112fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

High 8.8

In plain English

A high-severity out-of-bounds read in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 71.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced. This results in an out-of-bounds read. This patch adds an early exit check after stripping prepended delimiters. If no path content remains, the function returns NULL. The bug was identified via manual audit and verified using a standalone test case compiled with AddressSanitizer, which triggered a SEGV on affected inputs.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:10kernel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-devel-matched5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-64k-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-abi-stablelists6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-abi-stablelists4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-abi-stablelists5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-core4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-cross-headers6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-cross-headers4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-cross-headers5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-debug4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-debug5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-debug-core4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-debug-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-debug-devel4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-debug-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-debug-devel-matched5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-debug-modules4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-debug-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-debug-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-debug-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-debug-uki-virt5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-devel4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-devel-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-devel-matched5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-doc6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-doc4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-doc5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-headers6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-headers4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-headers5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-modules4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-modules-extra4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:10kernel-rt6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-core4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-debug4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-debug5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-debug-core4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-debug-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-debug-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-debug-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-devel4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-modules4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-rt-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.141.1.rt7.482.el8_10ALSA-2026:36365
AlmaLinux:9kernel-rt-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-tools6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-tools4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-tools5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-tools-libs6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-tools-libs4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-tools-libs5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-tools-libs-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-uki-virt6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-uki-virt5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-uki-virt-addons5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-zfcpdump4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-zfcpdump5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-zfcpdump-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-zfcpdump-devel5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-zfcpdump-modules5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10libperf6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9libperf5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10perf6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8perf4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9perf5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10python3-perf6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:8python3-perf4.18.0-553.141.1.el8_10ALSA-2026:36366
AlmaLinux:9python3-perf5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10rtla6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9rtla5.14.0-687.22.1.el9_8ALSA-2026:36018
AlmaLinux:10rv6.12.0-211.30.1.el10_2ALSA-2026:34911
AlmaLinux:9rv5.14.0-687.22.1.el9_8ALSA-2026:36018
Debian:12linux6.1.176-1DEBIAN-CVE-2026-43112
Debian:13linux6.12.85-1DEBIAN-CVE-2026-43112
Debian:14linux6.19.14-1DEBIAN-CVE-2026-43112
Rocky Linux:8kernel0:4.18.0-553.141.1.el8_10.0.1RLSA-2026:36366
Rocky Linux:9kernel0:5.14.0-687.22.1.el9_8RLSA-2026:36018
Rocky Linux:8kernel-rt0:4.18.0-553.141.1.rt7.482.el8_10RLSA-2026:36365
Ubuntu:22.04:LTSlinux5.15.0-186.196UBUNTU-CVE-2026-43112
Ubuntu:24.04:LTSlinux6.8.0-136.136UBUNTU-CVE-2026-43112
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-43112
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-43112
Ubuntu:22.04:LTSlinux-aws5.15.0-1112.119UBUNTU-CVE-2026-43112
Ubuntu:24.04:LTSlinux-aws6.8.0-1061.64UBUNTU-CVE-2026-43112
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-43112
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-43112
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-43112
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-43112

Affected products (as reported)

VendorProductVersions
Linux Linux c63433a09d6ae4c226fcbc66da4c58fc189fd746 – before a2ba20c17de8eb028f96b1d85f119d3d25655bd9a31080899d5fdafcccf7f39dd214a814a2c82626 – before fbced33599653471b4581dfe1abc7b467031f126a31080899d5fdafcccf7f39dd214a814a2c82626 – before 5d4fe469fe7dbff7d874c196bb680a82f2625d95a31080899d5fdafcccf7f39dd214a814a2c82626 – before 2d29214448ec0f4e7e18bb1c14dd4a6c07f1c439a31080899d5fdafcccf7f39dd214a814a2c82626 – before 86f9c23e0814cfdffda9eedf0c591c51ba209010a31080899d5fdafcccf7f39dd214a814a2c82626 – before 49b1ce6d7cfb6c5a49f68bf5ccfcfb6ba14e63c3a31080899d5fdafcccf7f39dd214a814a2c82626 – before 78ec5bf2f589ec7fd8f169394bfeca541b0773175.15.11 – before 5.15.209
Linux Linux 5.16

Weakness: CWE-125 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References