vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64391

ksmbd: use opener credentials for ADS I/O

CRITICAL
9.8
CVSS Score
Published: July 25, 2026 at 08:50 AM UTC
Updated: October 30, 2026 at 01:19 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 0.5%

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
5.15 ≤ v < 6.12.966.13 ≤ v < 6.18.396.19 ≤ v < 7.1.45.15f44158485826c076335d6860d35872271a83791d
Vendor states this is fixed in 2b4592cea214683de0f2ce6f8c22c097fb0ea1ab (fixed)
Vendor states this is fixed in 52a56cf53ec834c44ac1b4d16d585f26613ee5ce (fixed)
Vendor states this is fixed in a8f5d39971bbad9340d49cd41b0e2da9452a649d (fixed)
Vendor states this is fixed in baa5e094886fffa7e6272edcb5e08be5ce28262c (fixed)
Vendor states this is fixed in 5.15 (unaffected)
Vendor states this is fixed in 6.12.96 (unaffected)
Vendor states this is fixed in 6.18.39 (unaffected)
Vendor states this is fixed in 6.6.160 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

References (6)

Patch
Source: cverecord
https://git.kernel.org/stable/c/a8f5d39971bbad9340d49cd41b0e2da9452a649d
Patch
Source: cverecord
https://git.kernel.org/stable/c/2b4592cea214683de0f2ce6f8c22c097fb0ea1ab
Patch
Source: cverecord
https://git.kernel.org/stable/c/52a56cf53ec834c44ac1b4d16d585f26613ee5ce
Patch
Source: cverecord
https://git.kernel.org/stable/c/baa5e094886fffa7e6272edcb5e08be5ce28262c
Source: cverecord
https://git.kernel.org/stable/c/2ad5509dd576ae16d252d4698daf03002f9e0234
Source: cverecord
https://git.kernel.org/stable/c/222c4c52c3af2d0f68de31182710df3508a31095

CVSS

9.8CRITICALLinux
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card