2 matches found
CVE-2026-64138: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate SID in parent security descriptor during ACL inheritance Introduce smbvalidatentsdsid helper to safely validate Owner SID and Group SID inside the NT Security Descriptor smbntsd retrieved from the parent directory...
8.8CVSS5.8AI score0.00601EPSS
SaveExploits0References5
DEBIAN-CVE-2025-21946
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parsesecdesc If osidoffset, gsidoffset and dacloffset could be greater than smbntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it includ...
7.1CVSS5.6AI score0.00483EPSS
SaveExploits0References1
20