PT-2026-64609 · Linux · Linux

CVE-2026-64388 · Publicado 2026-07-25 · Atualizado 2026-07-25

NVD

In the Linux kernel, the following vulnerability has been resolved:

smb/client: fix chown/chgrp with SMB3 POSIX Extensions

Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS MOUNT CIFS ACL or CIFS MOUNT MODE FROM SID were also explicitly set.

Fix this by checking for posix extensions in cifs setattr nounix() when updating UID and GID, ensuring that id mode to cifs acl() is called to map and set the ownership/group information on the server.

Identificadores relacionados

CVE-2026-64388

Produtos afetados

Linux

Referências · 3

• https://git.kernel.org/stable/c/760ef2c579c2609cf17fb1cd5392f64d42d43d33 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64388 · Nota de Segurança
• https://git.kernel.org/stable/c/550cfb8a81181331d4d0f76ab75ee58a0bf41e3e · Nota