Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-64138

ksmbd: validate SID in parent security descriptor during ACL inheritance

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < f7c4dee323d9176b8d3f5c69018ee57ae0d4653caffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 8efbea0253b7fa2d1960cab0fed36544ca0b41abaffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < f0e5c9c663badc9982e6941322eef1cb17de0f11affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 18d8db24b0a5b7be4829238dd4022236df02d421affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 1c9d0646a9959752f11ca1080dc1ff26bd1756cbaffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to < 69f030cf95488ae1186c72ac8c66fd279664ea7faffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.92 to ≤ 6.12.*unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References