CVE-2026-90176

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ksmbd module, the check lock range() function incorrectly handles single-byte ranges because it uses inclusive ranges. When the start and end offsets are equal, the system treats it as an empty range rather than a valid single-byte range. This shortcut allows one-byte reads, writes, copychunk operations, and one-byte truncate ranges to bypass mandatory byte-range lock checks, enabling operations to proceed even if a conflicting lock exists for that specific byte.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.