U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2026-46243 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/0aece6685fc80a8de492688ca2315fb86ec379c7 kernel.org
https://git.kernel.org/stable/c/2035acfb17221729b1b8ac335e941868a04ca079 kernel.org
https://git.kernel.org/stable/c/3da1fdf4efbc490041eb4f836bf596201203f8f2 kernel.org
https://git.kernel.org/stable/c/7713bd320ed4fc3d08a227cd8e41242219a16981 kernel.org
https://git.kernel.org/stable/c/91f89c1d83e80417629791fcef6af8140d7d01c8 kernel.org
https://git.kernel.org/stable/c/9544559e59438a4b609b2fdfa0763d8360572824 kernel.org
https://git.kernel.org/stable/c/a3bbda6502a9398b816fa2e71c9a3f955f58013d kernel.org
https://git.kernel.org/stable/c/cf20038657d6d4974349556a34e08fe0490bebbc kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2026-46243
NVD Published Date:
06/01/2026
NVD Last Modified:
06/01/2026
Source:
kernel.org