CVE-2026-64379

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-64379
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64379.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64379
Downstream
Published
2026-07-25T08:50:29.717Z
Modified
2026-07-28T04:03:00.939232027Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H CVSS Calculator
Summary
smb: client: mask server-provided mode to 07777 in modefromsid
Details

In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parsedacl() applies the server-provided subauth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64379.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2f8fbfb8d09c06decde162090fac3ee220aa280
Fixed
5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14
Fixed
ee2216dbdf0c677e89bb43e03247dba590ed00ef
Fixed
f511807feee7cb29b61bdfa86472c7e9e2e5df94
Fixed
08c600b7e1818539ba5efee4cdb06215c245ca78
Fixed
b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d
Fixed
c6c484a7d5bff6b929a86d7ed5130f29834c6a0d
Fixed
f80add1bfb3425100a325b14f19648e75669a954
Fixed
e3d9c7160d483fc8f9e225aafad8ecbbc43f3151

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64379.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.4.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.96
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.39
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64379.json"