CVE-2026-68457

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ksmbd module, the SET SPARSE, SET ZERO DATA, and SET COMPRESSION operations use current worker credentials instead of the credentials captured when the SMB handle was opened. This allows the VFS xattr, fallocate, or fileattr helpers to revalidate inode permissions, ownership, and LSM (Linux Security Module) policy independently of the SMB handle access mask.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.