CVE-2026-64394 | Linux Kernel up to 7.1.3 ksmbd fs/smb/server/smbacl.c smb2_set_info_sec daccess access control

July 25, 2026 Yanac

A vulnerability was found in Linux Kernel up to 6.1.177/6.6.144/6.12.95/6.18.38/7.1.3. It has been classified as very critical. Affected by this vulnerability is the function smb2_set_info_sec of the file fs/smb/server/smbacl.c of the component ksmbd. This manipulation of the argument daccess causes improper access controls.

This vulnerability is registered as CVE-2026-64394. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More