CVE-2026-68099

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ksmbd component where the check add overflow() function unconditionally writes a truncated sum into the destination variable even when an overflow occurs. In the set posix acl entries dacl() and set ntacl dacl() functions, guards using check add overflow() break out of ACE-building loops upon overflow, but the truncated size variable is subsequently used in set ntacl dacl(). This results in an NT ACL where the pndacl->size under-reports the actual bytes written by fill ace for sid() or memcpy() calls. This malformed ACL can lead to out-of-bounds reads when it is re-parsed by clients or by ksmbd itself.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.