SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-64379

HIGH · CVSS 7.1 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-07-25 · Last synced 2026-08-24

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel allows for improper handling of server-provided mode values when the modefromsid feature is active, potentially leading to unauthorized permissions being granted. This could result in elevated privileges or access to sensitive data, posing a significant risk to system integrity. Organizations using affected Linux distributions, particularly those relying on NFS, should prioritize patching this vulnerability to mitigate potential exploitation.

CVE
CVE-2026-64379
Severity
HIGH
CVSS
7.1
EPSS
0.31%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.