CVE-2026-89638 | Linux Kernel up to 6.18.50/7.2.3 CIFS Client cifs.ko cifs_setattr_unix/cifs_setattr_nounix ia_valid privileges management

A vulnerability was found in Linux Kernel up to 6.18.50/7.2.3. It has been declared as problematic. This vulnerability affects the function cifs_setattr_unix/cifs_setattr_nounix of the file cifs.ko of the component CIFS Client. Such manipulation of the argument ia_valid leads to improper privilege management.

This vulnerability is referenced as CVE-2026-89638. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More