CVE-2026-68098

CVE-2026-68098 affects ksmbd in the Linux kernel. The root cause is in set_ntacl_dacl(), which can stop copying ACEs when DACL size accounting overflows. As a result, the dedup walk may inspect a tail beyond the copied ACEs, potentially enabling an out-of-bounds read with possible denial of servi...