Linux ksmbd out-of-bounds read can leak information
Original title: ZDI-26-1003: Linux Kernel ksmbd smb_inherit_dacl Out-Of-Bounds Read Information Disclosure Vulnerability
CVE-2026-64138 requires authentication and affects only systems with ksmbd enabled.
ZDI published ZDI-26-1003, an out-of-bounds read in Linux kernel ksmbd smb_inherit_dacl. An authenticated remote attacker can disclose sensitive information, and only systems with ksmbd enabled are vulnerable. ZDI assigned CVE-2026-64138 and a CVSS rating of 7.1. No fixed version or exploitation status is stated.
- Assigned identifier is CVE-2026-64138.
- ZDI CVSS rating is 7.1.
- Authentication is required to exploit it.
- The flaw is in smb_inherit_dacl.
Impact: Authenticated remote disclosure of sensitive information
| Product | Affected |
|---|---|
| Linux Kernel | — |
- CVEs
- CVE-2026-64138
- Vendors
- Linux
- Products
- Linux Kernelksmbd
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-64138 | Linux kernel: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smb_validate_ntsd_sid()… | 8.8 | <1% |
From the original article
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. However, only systems with ksmbd enabled are vulnerable.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.