CVE-2026-64138

Published: Jul 19, 2026Modified: Aug 18, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.

Affected (7)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.15 to 6.12.92
Linux Linux Kernel	From 6.13 to 6.18.34
Linux Linux Kernel	From 6.19 to 7.0.11
Linux Linux Kernel	Version 7.1 rc1
Linux Linux Kernel	Version 7.1 rc2
Linux Linux Kernel	Version 7.1 rc3
Linux Linux Kernel	Version 7.1 rc4

References (4)

https://git.kernel.org/stable/c/18d8db24b0a5b7be4829238dd4022236df02d421

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/1c9d0646a9959752f11ca1080dc1ff26bd1756cb

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/69f030cf95488ae1186c72ac8c66fd279664ea7f

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/f0e5c9c663badc9982e6941322eef1cb17de0f11

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.