PT-2026-61455 · Linux · Linux

CVE-2026-64138 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate SID in parent security descriptor during ACL inheritance

Introduce smb validate ntsd sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb ntsd) retrieved from the parent directory.

Correção

Identificadores relacionados

CVE-2026-64138

Produtos afetados

Linux

Referências · 5

• https://git.kernel.org/stable/c/18d8db24b0a5b7be4829238dd4022236df02d421 · Nota
• https://git.kernel.org/stable/c/1c9d0646a9959752f11ca1080dc1ff26bd1756cb · Nota
• https://git.kernel.org/stable/c/69f030cf95488ae1186c72ac8c66fd279664ea7f · Nota
• https://git.kernel.org/stable/c/f0e5c9c663badc9982e6941322eef1cb17de0f11 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64138 · Nota de Segurança