SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64138

HIGH · CVSS 8.8 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the ksmbd component, specifically in the validation of Security Identifiers (SIDs) during Access Control List (ACL) inheritance. This flaw could allow unauthorized access or privilege escalation by improperly handling SIDs in NT Security Descriptors, potentially compromising system security. Organizations using Linux systems with ksmbd should prioritize patching this vulnerability to mitigate the risk of exploitation.

CVE
CVE-2026-64138
Severity
HIGH
CVSS
8.8
EPSS
0.41%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid() helper to safely validate Owner SID and Group SID inside the NT Security Descriptor (smb_ntsd) retrieved from the parent directory.