CVE-2026-64395

kernel: ksmbd: require source read access for duplicate extents

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows an attacker with attribute access to a file to bypass security checks when duplicating file extents. By using the FSCTL_DUPLICATE_EXTENTS_TO_FILE function, an attacker can copy the contents of a source file to a destination that they can read, leading to information disclosure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-358 · Improperly Implemented Security Check for Standard