8.1

CVE-2026-93786

ksmbd: preserve VFS inherited POSIX ACL mask

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: preserve VFS inherited POSIX ACL mask

The VFS initializes a child's POSIX ACL from the parent's default ACL and
the requested creation mode. Do not mutate the parent ACL or overwrite the
child's VFS-computed access and default ACLs afterwards.

This preserves restrictive ACL_MASK entries and prevents SMB object creation
from widening effective permissions.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f44158485826c076335d6860d35872271a83791d
Version < 4a19bb1c45667f5a5f6eff9cf6648e0f692d046f
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < 591acf171644de590cda245fd8595b473a1beb70
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < 0093909becbda22b62b39b654dbc607faed59cd0
Status affected
Version f44158485826c076335d6860d35872271a83791d
Version < e148e567a9252643baa125cb65d7ae9c2c6cf68a
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.15
Status affected
Version 0
Version < 5.15
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.33% 0.235
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.1 2.8 5.2
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/591acf171644de590cda245fd8595b473a1beb70
https://git.kernel.org/stable/c/0093909becbda22b62b39b654dbc607faed59cd0
https://git.kernel.org/stable/c/e148e567a9252643baa125cb65d7ae9c2c6cf68a
https://git.kernel.org/stable/c/4a19bb1c45667f5a5f6eff9cf6648e0f692d046f