CVE-2026-63909

CVE-2026-63909 – Linux kernel ksmbd OOB read regression . The issue stems from a transposed bounds check in smb_check_perm_dacl() that, after a patch, allowed reading beyond allocated memory during SMB2_CREATE operations. The correct guard requires at least 16 bytes (8-byte offset + 8-byte SID ba...