CVE-2026-64393

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ksmbd module, SMB2 SET INFO handlers call path-based VFS (Virtual File System) helpers after verifying the access mask of the SMB handle. These helpers perform owner, inode permission, and LSM (Linux Security Module) checks using the current ksmbd worker credentials instead of the credentials used when the handle was opened. This can lead to incorrect permission validation during the SET INFO dispatch process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.