CVE-2026-93786

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ksmbd module where the Virtual File System (VFS) initializes a child's POSIX Access Control List (ACL) using the parent's default ACL and the requested creation mode. The system fails to preserve the restrictive ACL MASK entries, which can allow SMB object creation to widen effective permissions by mutating the parent ACL or overwriting the VFS-computed access and default ACLs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.