CVE-2026-64138
Published: July 22, 2026Last modified: November 3, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 8.8 |
| Attack Vector | NETWORK |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.191-r0) |
| 25 LTS | linux-lts | Fixed (6.12.92-r0) | |
| Stream | linux-lts | Fixed (6.18.35-r1) |
References
- https://git.kernel.org/stable/c/18d8db24b0a5b7be4829238dd4022236df02d421
- https://git.kernel.org/stable/c/1c9d0646a9959752f11ca1080dc1ff26bd1756cb
- https://git.kernel.org/stable/c/69f030cf95488ae1186c72ac8c66fd279664ea7f
- https://git.kernel.org/stable/c/8efbea0253b7fa2d1960cab0fed36544ca0b41ab
- https://git.kernel.org/stable/c/f0e5c9c663badc9982e6941322eef1cb17de0f11
- https://git.kernel.org/stable/c/f7c4dee323d9176b8d3f5c69018ee57ae0d4653c