CVE-2026-98167: Software Security Vulnerability Vulnerability

UNKNOWN
Advisory Identifier: GHSA-wwfg-4wrm-v6qx
Share
Published
Advisory Summary

CVE-2026-98167 is a security vulnerability vulnerability (General Security Weakness) affecting Software libraries in the Maven ecosystem. Remediation is available in the latest vendor maintenance releases.

CVE-2026-98167 at a Glance

CVE Identifier CVE-2026-98167
GHSA Identifier GHSA-wwfg-4wrm-v6qx
Severity N/A
CVSS v3.1 Base Score N/A
CWE Classification General Security Weakness
Affected Product Software
Package Ecosystem Maven
Published Date
Last Updated

How to Fix CVE-2026-98167

To remediate this vulnerability, upgrade all affected Software dependencies to a patched release. Both direct and transitive dependencies should be checked, as frameworks or security libraries may pull in vulnerable versions transitively.

Verify Direct and Transitive Dependencies

Run the following command in your project directory to verify that all resolved dependencies use the patched release: 

mvn dependency:tree

How to Check if You Are Affected

To determine whether your Java application is affected by CVE-2026-98167, inspect your build dependencies using the Maven Dependency Plugin:

mvn dependency:tree

Analyze the terminal output to locate any version of Software in your dependency tree. If any resolved version matches the vulnerable ranges listed in the table below (for example, versions earlier than the patched release), your application is affected.

Note: The mvn dependency:tree command inspects the resolved dependency graph declared in your project's POM files; it does not perform automated security scanning or inspect runtime dynamic classpaths. Always verify runtime container classpaths and shaded JARs.

Technical Details

Vulnerability Mechanism & Technical Analysis

This vulnerability is classified under General Security Weakness. In Software, software state validation or input boundaries are circumvented during processing. Review the official source advisory statement below for specific affected components, classes, and reproduction details.

Source Advisory Statement

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server->total_read for compound encrypted PDUs In receive_encrypted_standard(), server->total_read is left at the full decrypted frame size when walking sub-PDUs of a compound encrypted frame. As a result, cifs_handle_standard() passes this full size to smb2_check_message(), causing the PDU length guards to incorrectly validate the entire compound frame instead of the current sub-PDU. This allows truncated non-last sub-PDUs to bypass length validation, leading to out-of-bounds reads in smb2_get_data_area_len(). Fix this by setting server->total_read to the true length of the current sub-PDU: next_cmd for non-last sub-PDUs, and the remaining pdu_length for the last one.

References

NVD — CVE-2026-98167 NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-98167
git.kernel.org/stable/c/282b72f9a7... WEB
https://git.kernel.org/stable/c/282b72f9a7ef31296c48366db4128882999cc048
git.kernel.org/stable/c/8703539d22... WEB
https://git.kernel.org/stable/c/8703539d22fdbc13dd2db090ee199c3a427b8ea0
git.kernel.org/stable/c/a46eb242e9... WEB
https://git.kernel.org/stable/c/a46eb242e9eef3a3897d166748b23303c516e870
git.kernel.org/stable/c/e78fc1d240... WEB
https://git.kernel.org/stable/c/e78fc1d240b27349b45a0f1c3e3c2c401d7e230d
git.kernel.org/stable/c/ebb8a075fd... WEB
https://git.kernel.org/stable/c/ebb8a075fdc7af3d196a4f158a0e18dbc394c0e3
git.kernel.org/stable/c/f73726b83e... WEB
https://git.kernel.org/stable/c/f73726b83e4756fdaa099e1bc1143293bd57ad79

Frequently Asked Questions

What is CVE-2026-98167?
CVE-2026-98167 is a security vulnerability in Software classified as a security vulnerability vulnerability under General Security Weakness.
Which Software versions are affected?
Affected versions include releases prior to current release patches.
What version fixes CVE-2026-98167?
Upgrading to current release patches (or the latest patched release for your respective branch) resolves the vulnerability.
What CWE is associated with CVE-2026-98167?
CVE-2026-98167 is classified under General Security Weakness.
How can I check Maven dependencies for CVE-2026-98167?
Run the dependency tree command: 'mvn dependency:tree'. This command lists direct and transitive dependencies in your build configuration so you can verify if a vulnerable version is resolved.
Machine-readable OSV JSON OSV v1.5 Schema
Normalized schema output
View Raw JSON 
{
  "schema_version" : "1.4.0",
  "id" : "GHSA-wwfg-4wrm-v6qx",
  "modified" : "2026-10-06T09:31:28Z",
  "published" : "2026-10-06T09:31:28Z",
  "aliases" : [ "CVE-2026-98167" ],
  "details" : "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix server->total_read for compound encrypted PDUs\n\nIn receive_encrypted_standard(), server->total_read is left at the\nfull decrypted frame size when walking sub-PDUs of a compound encrypted\nframe. As a result, cifs_handle_standard() passes this full size\nto smb2_check_message(), causing the PDU length guards to incorrectly\nvalidate the entire compound frame instead of the current sub-PDU.\n\nThis allows truncated non-last sub-PDUs to bypass length validation,\nleading to out-of-bounds reads in smb2_get_data_area_len().\n\nFix this by setting server->total_read to the true length of the\ncurrent sub-PDU: next_cmd for non-last sub-PDUs, and the remaining\npdu_length for the last one.",
  "severity" : [ ],
  "affected" : [ ],
  "references" : [ {
    "type" : "ADVISORY",
    "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-98167"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/282b72f9a7ef31296c48366db4128882999cc048"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/8703539d22fdbc13dd2db090ee199c3a427b8ea0"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/a46eb242e9eef3a3897d166748b23303c516e870"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/e78fc1d240b27349b45a0f1c3e3c2c401d7e230d"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/ebb8a075fdc7af3d196a4f158a0e18dbc394c0e3"
  }, {
    "type" : "WEB",
    "url" : "https://git.kernel.org/stable/c/f73726b83e4756fdaa099e1bc1143293bd57ad79"
  } ],
  "database_specific" : {
    "cwe_ids" : [ ],
    "severity" : null,
    "github_reviewed" : false,
    "github_reviewed_at" : null,
    "nvd_published_at" : "2026-10-06T09:17:58Z"
  }
}