CVE-2026-68098

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ksmbd module where the set ntacl dacl() function may stop copying Access Control Entries (ACEs) before processing the entire input Discretionary Access Control List (DACL) due to size accounting overflow. In such cases, while num aces correctly reflects the number of copied ACEs, the set posix acl entries dacl() function continues to use nt num aces to iterate through the ACE array during the deduplication process. This causes the deduplication walk to scan beyond the copied ACE array and inspect the buffer tail containing invalid ACEs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.