3 matches found
CVE-2026-93811
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix acl.sdbuf memory leak and invalid sdsize error handling 1. When ndrdecodev4ntacl fails, the code jumped to freendata which only freed n.data, skipping kfreeacl.sdbuf and leaking the buffer. Zero-initialize struct...
CVE-2026-93786
In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and...
CVE-2026-93282
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix maximum allowed access checks The DACL permission check looks for an ACE matching the current user and falls back to the Everyone ACE. It does not consider an Authenticated Users ACE, even though an authenticated sessi...