CVE-2026-31712

kernel: ksmbd: require minimum ACE size in smb_check_perm_dacl()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · October 20, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. An authenticated Server Message Block (SMB) client with permissions to set an Access Control List (ACL) on a file can craft a malicious Discretionary Access Control List (DACL). This crafted DACL, containing an undersized Access Control Entry (ACE), can lead to an out-of-bounds read when the kernel processes it during a subsequent file creation operation. This vulnerability could result in kernel state corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input