CVE-2026-64379

smb: client: mask server-provided mode to 07777 in modefromsid

State: Published
Severity: 7.1 High
Published: Jul 25, 2026
Updated: Oct 19, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H	Linux

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
LinuxLinux	e2f8fbfb8d09c06decde162090fac3ee220aa280 to before 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14Affected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before ee2216dbdf0c677e89bb43e03247dba590ed00efAffected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before f511807feee7cb29b61bdfa86472c7e9e2e5df94Affected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before 08c600b7e1818539ba5efee4cdb06215c245ca78Affected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before b84e002e0df26bbc6cbd3ca01b8212601fe0ae7dAffected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before c6c484a7d5bff6b929a86d7ed5130f29834c6a0dAffected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before f80add1bfb3425100a325b14f19648e75669a954Affected e2f8fbfb8d09c06decde162090fac3ee220aa280 to before e3d9c7160d483fc8f9e225aafad8ecbbc43f3151Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.96 through 6.12.Not affected 6.18.39 through 6.18.Not affected 7.1.4 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

e2f8fbfb8d09c06decde162090fac3ee220aa280 to before 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14Affected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before ee2216dbdf0c677e89bb43e03247dba590ed00efAffected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before f511807feee7cb29b61bdfa86472c7e9e2e5df94Affected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before 08c600b7e1818539ba5efee4cdb06215c245ca78Affected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before b84e002e0df26bbc6cbd3ca01b8212601fe0ae7dAffected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before c6c484a7d5bff6b929a86d7ed5130f29834c6a0dAffected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before f80add1bfb3425100a325b14f19648e75669a954Affected
e2f8fbfb8d09c06decde162090fac3ee220aa280 to before e3d9c7160d483fc8f9e225aafad8ecbbc43f3151Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.96 through 6.12.*Not affected
6.18.39 through 6.18.*Not affected
7.1.4 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.