CVE-2026-89638

CVE-2026-89638 is a vulnerability in the Linux kernel CIFS client (cifs.ko). When a file with the setuid or setgid bit set is written over a CIFS mount using the cifsacl, modefromsid, SMB3.1.1 POSIX, or SMB1 Unix extensions, the cleared mode is never propagated to the server . The root cause is t...