Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-64379

smb: client: mask server-provided mode to 07777 in modefromsid

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14affected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < ee2216dbdf0c677e89bb43e03247dba590ed00efaffected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < f511807feee7cb29b61bdfa86472c7e9e2e5df94affected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < 08c600b7e1818539ba5efee4cdb06215c245ca78affected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < b84e002e0df26bbc6cbd3ca01b8212601fe0ae7daffected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < c6c484a7d5bff6b929a86d7ed5130f29834c6a0daffected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < f80add1bfb3425100a325b14f19648e75669a954affected
  • e2f8fbfb8d09c06decde162090fac3ee220aa280 to < e3d9c7160d483fc8f9e225aafad8ecbbc43f3151affected

Linux Linux

Default version status: affected

  • 5.4affected
  • 0 to < 5.4unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.96 to ≤ 6.12.*unaffected
  • 6.18.39 to ≤ 6.18.*unaffected
  • 7.1.4 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References