What’s Vulnerable › Vulnerabilities

CVE-2026-23093: ksmbd: smbd: fix dma_unmap_sg() nents

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-04 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dma_unmap_sg() nents The dma_unmap_sg() functions should be called with the same nents as the dma_map_sg(), not the value the map function returned.

Affected products

• Linux kernel: from 5.15 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.123; from 6.7 before 6.12.69; from 6.13 before 6.18.8; 6.19-rc1, 6.19-rc2, 6.19-rc3, 6.19-rc4, 6.19-rc5, 6.19-rc6 — fixed in 5.15.199, 6.1.162, 6.12.69, 6.18.8, 6.6.123

How to fix

Upgrade to a fixed version: Linux kernel 5.15.199, 6.1.162, 6.12.69, 6.18.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4d1e9a4a450aae47277763562122cc80ed703ab2
• https://git.kernel.org/stable/c/6ececffd3e9fe93a87738625dc0671165d27bf96
• https://git.kernel.org/stable/c/70ba85e439221a5d6dda34a3004db6640f0525e6
• https://git.kernel.org/stable/c/98e3e2b561bc88f4dd218d1c05890672874692f6
• https://git.kernel.org/stable/c/d1943bc9dc9508f5933788a76f8a35d10e43a646
• https://git.kernel.org/stable/c/f569f5b8bfd5133defdf9c7f8a72c63aa11f54ec

Get alerted when CVE-2026-23093 or the next vulnerability affects your stack