← Back

CVE-2026-64379

nvd nist
Published: Jul 25, 2026Modified: Oct 19, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Exploitability: 2.8 / Impact: 4.2
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary)

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.

Affected (9)

Products: Linux: Linux Kernel
Linux
1 product
Linux Kernel
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
5.11 ≤ version < 5.15.212
Linux Kernel
5.16 ≤ version < 6.1.178
Linux Kernel
5.4 ≤ version < 5.10.261
Linux Kernel
6.13 ≤ version < 6.18.39
Linux Kernel
6.19 ≤ version < 7.1.4
Linux Kernel
6.2 ≤ version < 6.6.145
Linux Kernel
6.7 ≤ version < 6.12.96
Linux Kernel
Version 7.2 rc1
Linux Kernel
Version 7.2 rc2

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.