CVE-2026-64395
- Source
- https://cve.org/CVERecord?id=CVE-2026-64395
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64395.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64395
- Downstream
- Published
- 2026-07-25T08:50:40.393Z
- Modified
- 2026-07-28T04:02:54.349871575Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- ksmbd: require source read access for duplicate extents
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: require source read access for duplicate extents
FSCTLDUPLICATEEXTENTSTOFILE passes the source file directly to vfsclonefilerange() or vfscopyfilerange() without checking the SMB access mask granted to the source handle. A handle opened with attribute access can consequently be used to copy file contents into an attacker-readable destination.
Require FILEREADDATA on the source handle before either VFS operation, matching other ksmbd data-copy paths.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64395.json" }- References
-
- https://git.kernel.org/stable/c/2d2ab6983620c2d60ce7db72133984ca3873b929
- https://git.kernel.org/stable/c/67bdad9cf01b25030e3bf00bbce6c309319d6663
- https://git.kernel.org/stable/c/a10942af27832c2761d020863a46e79bebe0567d
- https://git.kernel.org/stable/c/b0d4d5cb846a1ddb7aaab9adfb5986e4540e6e5f
- https://git.kernel.org/stable/c/cedff600f1642aa982178503552f0d007bc829c8
- https://git.kernel.org/stable/c/db231af842868268839f9f9619c68cb27830d8be
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64395.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64395
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedeb817368f50c1cbe1bd07044124aad7db6330e3aFixed2d2ab6983620c2d60ce7db72133984ca3873b929Fixed67bdad9cf01b25030e3bf00bbce6c309319d6663Fixedb0d4d5cb846a1ddb7aaab9adfb5986e4540e6e5fFixeddb231af842868268839f9f9619c68cb27830d8beFixeda10942af27832c2761d020863a46e79bebe0567dFixedcedff600f1642aa982178503552f0d007bc829c8