In the Linux kernel, the following vulnerability has been resolved:
smb/client: validate new EOF for zero range
When FALLOC_FL_ZERO_RANGE is used without FALLOC_FL_KEEP_SIZE,
smb3_zero_range() may extend EOF without checking RLIMIT_FSIZE, allowing
the file to grow beyond the caller's file-size limit.
Fix this by calling inode_newsize_ok() before sending the zero-range
request when the operation would extend EOF.
Reproducer, using a file on a CIFS mount:
bash -c '
FILE=/mnt/cifs/repro
trap "" SIGXFSZ
ulimit -f 3072
truncate -s 2M "$FILE"
fallocate --zero-range -o 0 -l 4M "$FILE"
echo "fallocate rc=$?"
stat -c "file size=%s" "$FILE"
'
Before this change, the operation succeeds despite the 3 MiB limit:
fallocate rc=0
file size=4194304
After this change, fallocate fails and leaves the file at 2 MiB.
References
Configurations
Configuration 1 (hide)
|
History
22 Oct 2026, 16:02
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-770 | |
| CPE | cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
|
| References | () https://git.kernel.org/stable/c/06a4f9049cb6dc319bceec2dc813ba89add8b828 - Patch | |
| References | () https://git.kernel.org/stable/c/3673f057b64abfa957e8ae84448db69369a5091a - Patch | |
| References | () https://git.kernel.org/stable/c/5fbd8848f2e25c8163896ec52863df2305a3bb63 - Patch | |
| References | () https://git.kernel.org/stable/c/88972e35750792e717af287dc71f42a03b5cbce4 - Patch | |
| References | () https://git.kernel.org/stable/c/f320ca20c273a26cd779bdb2b2e4b076a95c76f6 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Linux linux Kernel
Linux |
21 Oct 2026, 13:21
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
25 Sep 2026, 11:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-09-25 11:17
Updated : 2026-10-22 16:02
NVD link : CVE-2026-98126
Mitre link : CVE-2026-98126
CVE.ORG link : CVE-2026-98126
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-770
Allocation of Resources Without Limits or Throttling