CVE-2026-68083

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client could exploit a path resolution error, specifically in the ksmbd_vfs_kern_path_create() function. This vulnerability allows a client to use ".." components in a path to escape the intended shared directory, potentially leading to unauthorized access to files or directories outside of the configured share.

Moderate severity is assigned to this flaw because successful exploitation requires valid authentication credentials to access an exported share and depends on winning a race condition during directory creation. Additionally, Red Hat Enterprise Linux kernels do not enable or include the in-kernel SMB server module (ksmbd), as file sharing capabilities are delivered through user-space Samba suites. As a result, default installations of Red Hat Enterprise Linux are not affected by this vulnerability.