Riskcovery

CVE-2026-64138

ksmbd: validate SID in parent security descriptor during ACL inheritance

State
Published
Severity
8.8 High
Published
Jul 19, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate SID in parent security descriptor during ACL inheritance

Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before f7c4dee323d9176b8d3f5c69018ee57ae0d4653cAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 8efbea0253b7fa2d1960cab0fed36544ca0b41abAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before f0e5c9c663badc9982e6941322eef1cb17de0f11Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 18d8db24b0a5b7be4829238dd4022236df02d421Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 1c9d0646a9959752f11ca1080dc1ff26bd1756cbAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 69f030cf95488ae1186c72ac8c66fd279664ea7fAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.