---
id: CVE-2026-99114
title: 'ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

  smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION,
  that is the whole of struct …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    995456b5e703e128904a6cbc8b3347eb3d04c72c
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    c78aea8984c84767e87f677477e4784deb8adfde
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    e8b82184a1982894820a91a72ac9857ddd5dffbf
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    370459776468fc68c97008360108f381e3120953
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    d8c450ad0d08980b39b08d435efa921086c8b227
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    03bb4338c3a7c3fc4decf699a35753f0891aab2a
  - >-
    Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 <
    c0cd3fc6824122014da2b3b0cb7ddeaa2946ec8e
  - Linux 5.15
published: '2026-10-28'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:41:52.446Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99114'
references:
  - url: 'https://git.kernel.org/stable/c/995456b5e703e128904a6cbc8b3347eb3d04c72c'
  - url: 'https://git.kernel.org/stable/c/c78aea8984c84767e87f677477e4784deb8adfde'
  - url: 'https://git.kernel.org/stable/c/e8b82184a1982894820a91a72ac9857ddd5dffbf'
  - url: 'https://git.kernel.org/stable/c/370459776468fc68c97008360108f381e3120953'
  - url: 'https://git.kernel.org/stable/c/d8c450ad0d08980b39b08d435efa921086c8b227'
  - url: 'https://git.kernel.org/stable/c/03bb4338c3a7c3fc4decf699a35753f0891aab2a'
  - url: 'https://git.kernel.org/stable/c/c0cd3fc6824122014da2b3b0cb7ddeaa2946ec8e'
tags:
  - cve.org
epss: 0.00173
epssPercentile: 0.06786
ingestedAt: '2026-10-28T11:09:40.452Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

smb2_get_info_filesystem() reports 48 bytes for FS_CONTROL_INFORMATION,
that is the whole of struct smb2_fs_control_info, but never assigns
FileSystemControlFlags.  Those four bytes go to the client as they are
found in the response buffer.

The buffer is zeroed on allocation, so a standalone request leaks
nothing.  A compound request can leak: the offset of the next response
is advanced by the length pinned for the previous one, so a reply that
was written into the buffer and then dropped in favour of the short
error response of smb2_set_err_rsp() stays there, and the next reply is
laid over it with only the header cleared.

ksmbd does not implement quota tracking, so report no control flags.

## Affected

- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 995456b5e703e128904a6cbc8b3347eb3d04c72c`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < c78aea8984c84767e87f677477e4784deb8adfde`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < e8b82184a1982894820a91a72ac9857ddd5dffbf`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 370459776468fc68c97008360108f381e3120953`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < d8c450ad0d08980b39b08d435efa921086c8b227`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 03bb4338c3a7c3fc4decf699a35753f0891aab2a`
- `Linux >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < c0cd3fc6824122014da2b3b0cb7ddeaa2946ec8e`
- `Linux 5.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.