{"id":"CVE-2026-98113","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: rate limit unmapped SID errors\n\nA client can include many structurally valid but unmapped SIDs in a DACL.\nLogging every mapping failure lets one request generate…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: rate limit unmapped SID errors\n\nA client can include many structurally valid but unmapped SIDs in a DACL.\nLogging every mapping failure lets one request generate…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-770"],"vendor":"Linux","product":"Linux","affected":["Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 3005d43143096321cc857645a9d48ef4ffde8bcf","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 674aabf554bdaffcf25f145bf32c8b4f510f7916","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 486876f957456721b5e51af532235db4c6f7bd47","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 13af319c1efec0b45fb5c1b16830eb0888b3fd1e","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 30dbb08777b9a611d7d9193c040f382fbd0e7562","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 54cb2a909996346ac6a8a3beac96c07b3dcba584","Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < feca5e70fc963b088377b20879e8cd8237c2fd7d","Linux 5.15"],"published":"2026-09-25","updated":"2026-10-03","sourceUpdated":"2026-10-03T11:18:33.347","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-98113","references":[{"url":"https://git.kernel.org/stable/c/13af319c1efec0b45fb5c1b16830eb0888b3fd1e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3005d43143096321cc857645a9d48ef4ffde8bcf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/30dbb08777b9a611d7d9193c040f382fbd0e7562","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/486876f957456721b5e51af532235db4c6f7bd47","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/54cb2a909996346ac6a8a3beac96c07b3dcba584","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/674aabf554bdaffcf25f145bf32c8b4f510f7916","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/feca5e70fc963b088377b20879e8cd8237c2fd7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98113.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98113"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541363"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98113"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98113"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98113.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00205,"epssPercentile":0.10457,"cvssSource":"vendor","ingestedAt":"2026-09-25T11:06:38.824Z","slug":"CVE-2026-98113","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: rate limit unmapped SID errors\n\nA client can include many structurally valid but unmapped SIDs in a DACL.\nLogging every mapping failure lets one request generate hundreds of kernel\nerror messages.\n\nRate limit the message to prevent an authenticated client from flooding\nthe kernel log.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-29 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98113.json)","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":212323,"id":"CVE-2026-98113","ts":1790668149272,"field":"cvss","old":null,"new":"5.5"},{"seq":212322,"id":"CVE-2026-98113","ts":1790668149272,"field":"severity","old":"none","new":"medium"}]}