CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

CVE-2026-89638

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

DEBIAN-CVE-2026-89638

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

AZL-100353 CVE-2026-89638 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

CVE-2026-89638

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

UBUNTU-CVE-2026-89638

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

CVE-2026-89766

In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...

CVE-2026-89638

CVE-2026-89638 is a Linux kernel SMB client (cifs.ko) flaw rated CVSS 7.8 (HIGH) , exploitable locally with low privileges. When a file with the setuid or setgid bit is written to on CIFS mounts using the cifsacl , modefromsid , or SMB3.1.1 POSIX extensions, the kernel's cifs_setattr_unix() and c...

EUVD-2026-76550

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

CVE-2026-89638

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

CVE-2026-89638 smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

PT-2026-90354

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the setuid or setgid bits are not properly cleared on the server when a file is written to. While the Virtual File System VFS strips these bits an...

CVE-2026-89638: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions When a file has the setuid or setgid bit set and is written to, the VFS strips those bits and issues a setattr with ATTRKILLSUID/ATTRKILLSGID...

PT-2026-102974

Name of the Vulnerable Software and Affected Versions adm-zip version 0.6.0 Description An issue exists where the software applies Unix permission bits from a zip entry directly to an extracted file using the fs.chmodSync function when the keepOriginalPermission flag is set to true in the...

sudo: Sudo: Privilege escalation due to failure in privilege drop calls

A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system...

NewStart CGSL MAIN 7.02 : openssh Multiple Vulnerabilities (NS-SA-2026-0101)

The remote NewStart CGSL host, running version MAIN 7.02, has openssh packages installed that are affected by multiple vulnerabilities: - ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re- exchange. This outcome occurs only on the client side...

COPY-FAIL-CVE-2026-31431

This is a public Proof-of-Concept PoC for CVE-2026-31431 "Copy Fail", a Linux kernel local privilege escalation vulnerability CVSS 7.8 affecting most major distributions since 2017. It corrupts the page cache of a setuid binary like /usr/bin/su using the kernel's AFALG crypto API + splice, allowi...

SUSE CVE-2026-79783

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid...

CVE-2026-79783

A flaw was found in rclone. This vulnerability allows a remote attacker to escalate privileges by manipulating file metadata. When copying files with metadata preservation from an untrusted source, rclone fails to properly mask special permission bits. This oversight enables an attacker to set...