CVE-2026-52944

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the Linux kernel, the fsctl set sparse() function fails to perform necessary permission checks when processing the FSCTL SET SPARSE operation. This allows a client on a read-only share to modify the sparse attribute of opened files. Additionally, on writable shares, clients lacking FILE WRITE DATA or FILE WRITE ATTRIBUTES access can still modify the sparse attribute. The issue occurs because the function modifies the attribute and saves it via xattr without verifying share-level writability or per-handle access rights.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.