CVE-2026-64399

A flaw was found in ksmbd. This vulnerability allows a remote attacker to overwrite data on a shared file system due to insufficient permission checks in the FSCTLDUPLICATEEXTENTSTOFILE function. Even if a share is configured as read-only or a client has limited write attributes, an attacker can...