Log in Start free

Vulnerability · Published Sep 16, 2026 · Assigned by Linux

CVE-2026-89794ksmbd: zero pipe read compound padding

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 88.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: zero pipe read compound padding Compound response handling extends the last response iov to an eight-byte boundary. smb2_read_pipe() allocates only the payload size, so the alignment padding can expose up to seven bytes of uninitialized kernel heap memory. Allocate the aligned size and clear the unused tail before pinning the response buffer.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-89794
Debian:13linux6.12.111-1DEBIAN-CVE-2026-89794
Debian:14linux7.2.6-1DEBIAN-CVE-2026-89794
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-89794
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-89794
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-89794
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-89794
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-89794

Affected products (as reported)

VendorProductVersions
Linux Linux 9f297df20d93411c0b4ddad7f88ba04a7cd36e77 – before c7516bdf7d2c1a64b14a9f444e2ee58c12c384aee2b76ab8b5c9327ab2dae6da05d0752eb2f4771d – before 134d980491b435e5cdb3171225e2506ff17867d1e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d – before f188a400dd5285fec5a84548fe8dca49eee01155e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d – before d83a9de7cecd401c3d3e00ed6371194dcd7313e4e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d – before be15b8da4a82cf1e1f9880b2661b90770606eec1e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d – before 73f860489e3be2245598d1819226304fc5b87291f2283680a80571ca82d710bc6ecd8f8beac67d636.1.71 – before 6.1.191
Linux Linux 6.6

References