PT-2026-61455 · Linux · Linux

CVE-2026-64138 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate SID in parent security descriptor during ACL inheritance

Introduce smb validate ntsd sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb ntsd) retrieved from the parent directory.

Fix

Related Identifiers

CVE-2026-64138

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64138 · Security Note
• https://git.kernel.org/stable/c/18d8db24b0a5b7be4829238dd4022236df02d421 · Note
• https://git.kernel.org/stable/c/1c9d0646a9959752f11ca1080dc1ff26bd1756cb · Note
• https://git.kernel.org/stable/c/69f030cf95488ae1186c72ac8c66fd279664ea7f · Note
• https://git.kernel.org/stable/c/f0e5c9c663badc9982e6941322eef1cb17de0f11 · Note