CVE-2026-68099

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An integer overflow vulnerability exists when processing Access Control Lists (ACLs). This flaw can lead to a malformed ACL, which, when re-parsed by clients or ksmbd itself, may trigger out-of-bounds reads. This could potentially allow an attacker to gain access to sensitive information.

This flaw in the ksmbd kernel module can lead to out-of-bounds reads when processing specially crafted Access Control Lists (ACLs). An attacker with local access could exploit this vulnerability to cause a denial of service or potentially disclose sensitive information on affected Red Hat Enterprise Linux systems where ksmbd is actively used.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.