CVE-2026-64138

kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the ksmbd module of the Linux kernel. This vulnerability arises from improper validation of Security Identifiers (SIDs) within the NT Security Descriptor (smb_ntsd) during Access Control List (ACL) inheritance. An attacker could exploit this to bypass intended security restrictions, potentially leading to unauthorized access to resources.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-639 · Authorization Bypass Through User-Controlled Key