What’s Vulnerable › Vulnerabilities

CVE-2026-98113: ksmbd: rate limit unmapped SID errors

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-28
• Weakness: CWE-770

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: rate limit unmapped SID errors A client can include many structurally valid but unmapped SIDs in a DACL. Logging every mapping failure lets one request generate hundreds of kernel error messages. Rate limit the message to prevent an authenticated client from flooding the kernel log.

Affected products

• Linux kernel: from 5.15 before 5.15.222; from 6.0 before 6.1.189; from 6.2 before 6.6.158; from 6.7 before 6.12.11; from 6.13 before 6.18.53; from 6.19 before 7.2.7 — fixed in 5.15.222, 6.1.189, 6.6.158, 6.12.11, 6.18.53, 7.2.7
• Linux kernel: 5.15 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 5.15.222, 6.1.189, 6.6.158, 6.12.11; Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/13af319c1efec0b45fb5c1b16830eb0888b3fd1e
• https://git.kernel.org/stable/c/3005d43143096321cc857645a9d48ef4ffde8bcf
• https://git.kernel.org/stable/c/30dbb08777b9a611d7d9193c040f382fbd0e7562
• https://git.kernel.org/stable/c/486876f957456721b5e51af532235db4c6f7bd47
• https://git.kernel.org/stable/c/54cb2a909996346ac6a8a3beac96c07b3dcba584
• https://git.kernel.org/stable/c/674aabf554bdaffcf25f145bf32c8b4f510f7916
• https://git.kernel.org/stable/c/feca5e70fc963b088377b20879e8cd8237c2fd7d

Get alerted when CVE-2026-98113 or the next vulnerability affects your stack