9.8

CVE-2026-64391

ksmbd: use opener credentials for ADS I/O

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: use opener credentials for ADS I/O

Alternate data streams are stored as xattrs. Unlike regular file I/O,
their read and write paths therefore call VFS xattr helpers which recheck
inode permissions and LSM policy using the current task credentials.

Run ADS I/O with the credentials captured when the SMB handle was opened.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f44158485826c076335d6860d35872271a83791d
Version < a8f5d39971bbad9340d49cd41b0e2da9452a649d
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < 2b4592cea214683de0f2ce6f8c22c097fb0ea1ab
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < 52a56cf53ec834c44ac1b4d16d585f26613ee5ce
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < baa5e094886fffa7e6272edcb5e08be5ce28262c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.372
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/a8f5d39971bbad9340d49cd41b0e2da9452a649d
https://git.kernel.org/stable/c/2b4592cea214683de0f2ce6f8c22c097fb0ea1ab
https://git.kernel.org/stable/c/52a56cf53ec834c44ac1b4d16d585f26613ee5ce
https://git.kernel.org/stable/c/baa5e094886fffa7e6272edcb5e08be5ce28262c