CVE-2026-64395

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ksmbd module, the FSCTL DUPLICATE EXTENTS TO FILE control code passes the source file to vfs clone file range() or vfs copy file range() without verifying the SMB access mask of the source handle. This allows a handle opened only with attribute access to be used to copy file contents into a destination that an attacker can read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.