{"id":6078,"date":"2026-09-04T18:48:18","date_gmt":"2026-09-04T10:48:18","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-68431"},"modified":"2026-09-04T18:48:18","modified_gmt":"2026-09-04T10:48:18","slug":"cve-2026-68431","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-68431","title":{"rendered":"CVE-2026-68431 [CRITICAL] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: validate minim"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ksmbd: validate minimum PDU size for transform requests<\/p>\n<p>The receive path applies the minimum SMB2 PDU size check only when<br \/>\nProtocolId is SMB2_PROTO_NUMBER. A packet carrying<br \/>\nSMB2_TRANSFORM_PROTO_NUM bypasses the check even when the negotiated<br \/>\ndialect does not provide transform handling.<\/p>\n<p>On an SMB 2.1 connection, a short transform packet therefore reaches<br \/>\ninit_smb2_rsp_hdr(), which interprets the request as a full SMB2 header<br \/>\nand reads beyond the request allocation. The copied fields can then be<br \/>\nreturned to the unauthenticated client.<\/p>\n<p>Compression transforms are converted to ordinary SMB2 messages before<br \/>\nprotocol validation. After that conversion, validate ordinary SMB2<br \/>\nrequests against SMB2_MIN_SUPPORTED_PDU_SIZE and require encryption<br \/>\ntransform requests to contain both a transform header and an SMB2<br \/>\nheader. This rejects truncated requests before work allocation.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>ksmbd: validate minimum PDU size for transform requests<\/p>\n<p>The receive path applies the minimum SMB2 PDU size check only when<br \/>\nProtoco<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6078","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6078","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6078"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}