Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-93786

ksmbd: preserve VFS inherited POSIX ACL mask

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and default ACLs afterwards. This preserves restrictive ACL_MASK entries and prevents SMB object creation from widening effective permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f44158485826c076335d6860d35872271a83791d to < 4a19bb1c45667f5a5f6eff9cf6648e0f692d046faffected
  • f44158485826c076335d6860d35872271a83791d to < 591acf171644de590cda245fd8595b473a1beb70affected
  • f44158485826c076335d6860d35872271a83791d to < 0093909becbda22b62b39b654dbc607faed59cd0affected
  • f44158485826c076335d6860d35872271a83791d to < e148e567a9252643baa125cb65d7ae9c2c6cf68aaffected

Linux Linux

Default version status: affected

  • 5.15affected
  • 0 to < 5.15unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References