7.1

CVE-2026-64379

smb: client: mask server-provided mode to 07777 in modefromsid

In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parse_dacl() applies the server-provided
sub_auth[2] value from the NFS mode SID to cf_mode without masking to
07777. Apply the correct masking, same as in the read path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < ee2216dbdf0c677e89bb43e03247dba590ed00ef
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < f511807feee7cb29b61bdfa86472c7e9e2e5df94
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < 08c600b7e1818539ba5efee4cdb06215c245ca78
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < c6c484a7d5bff6b929a86d7ed5130f29834c6a0d
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < f80add1bfb3425100a325b14f19648e75669a954
Status affected
Version e2f8fbfb8d09c06decde162090fac3ee220aa280
Version < e3d9c7160d483fc8f9e225aafad8ecbbc43f3151
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.4
Status affected
Version 0
Version < 5.4
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.232
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.1 2.8 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14
https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef
https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94
https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78
https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d
https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d
https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954
https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151