CVE-2026-68097

In the Linux kernel ksmbd code path, the ACE size check in set_ntacl_dacl() does not verify that the declared ACE size can contain all sub-authorities described by sid.num_subauth. An undersized ACE can be copied, allowing a subsequent POSIX ACL deduplication walk to read data beyond the copied A...