CVE-2026-63909

kernel: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smb_check_perm_dacl() function can lead to a 2-byte heap out-of-bounds (OOB) read during Server Message Block (SMB2) create operations. This vulnerability may allow a remote attacker to disclose sensitive information or potentially cause a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-125 · Out-of-bounds Read