# CVE-2026-97555

Heap overflow in Linux CIFS/SMB client DACL rewrite enabling kernel memory corruption.

- Page: https://www.vulneraibility.com/cve/CVE-2026-97555
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.58% (percentile 48.4)
- Unvetted proof-of-concept code on GitHub: 1 GitHub proof of concept (first 2026-10-29)
- Published: 2026-09-25

## Affected versions

- Linux: affected >= bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 and < fb736ab4fb8c4fdb8b2f9ccd3a62e03d11549ca1; >= bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 and < 7fa84c9ca690643f429ae2709584a47e74b572c9; >= bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 and < 2a9aee9ef5622d58d8aafaa3263b3ffe70e2d9dd; >= bc3e9dd9d104ca1b75644eab87b38ce8a924aef4 and < 0ee150794c75bcd0be0e24ff3394f433cbae18cc; 5.12; fixed in < 5.12, >= 6.12.111 and <= 6.12.*, >= 6.18.53 and <= 6.18.*, >= 7.2.7 and <= 7.2.*, >= 7.3-rc3 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Kernel heap overflow during SMB DACL rewrite; can cause kernel memory corruption leading to privilege escalation or remote kernel compromise when mounting malicious SMB shares.

## Action

Immediate action required

## Recommendation

Apply vendor/upstream kernel patches immediately; avoid untrusted SMB servers.

## References

- [other] https://git.kernel.org/stable/c/4e78b5ff13214353750b87283ff79f62510f5844
- [other] https://git.kernel.org/stable/c/63c2fbde15ffc9a0c21adf670c38d028e20fa65c
- [other] https://git.kernel.org/stable/c/d5cea6766ae1868a51c7d17d77d065b4f55c587f
- [other] https://git.kernel.org/stable/c/fb736ab4fb8c4fdb8b2f9ccd3a62e03d11549ca1
- [other] https://git.kernel.org/stable/c/7fa84c9ca690643f429ae2709584a47e74b572c9
- [other] https://git.kernel.org/stable/c/2a9aee9ef5622d58d8aafaa3263b3ffe70e2d9dd
- [other] https://git.kernel.org/stable/c/0ee150794c75bcd0be0e24ff3394f433cbae18cc

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.