CVE-2026-23093

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: smbd: fix dma_unmap_sg() nents

The dma_unmap_sg() functions should be called with the same nents as the dma_map_sg(), not the value the map function returned.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 0626e6641f6b467447c81dd7678a69c66f7746cf, < f569f5b8bfd5133defdf9c7f8a72c63aa11f54ec; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 6ececffd3e9fe93a87738625dc0671165d27bf96; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 4d1e9a4a450aae47277763562122cc80ed703ab2; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 70ba85e439221a5d6dda34a3004db6640f0525e6; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < d1943bc9dc9508f5933788a76f8a35d10e43a646; >= 0626e6641f6b467447c81dd7678a69c66f7746cf, < 98e3e2b561bc88f4dd218d1c05890672874692f6
LinuxLinux5.15

References

Timeline

Published
Feb 4, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-230945.5In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isoCVE-2026-230955.5In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memCVE-2026-230965.5In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add failCVE-2026-230975.5In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has founCVE-2026-230987.8In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_sCVE-2026-230997.1In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD mCVE-2026-23107.8IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when procesCVE-2026-231005.5In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series "mm/hugetlb: fixes fCVE-2026-231014.7In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when it is fully ready BefoCVE-2026-231027.1In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is suppoCVE-2026-231035.5In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per porCVE-2026-231045.5In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71a77fc3b ("ice: read int
CVE-2026-23093: Medium severity, CVSS 5.5 | Vulnix