CVE-2026-63909

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smbcheckpermdacl function can lead to a 2-byte heap out-of-bounds OOB read during Server Message Block SMB2 create operations. This vulnerability may allow a remote attacker to disclose sensitive...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ksmbd: A regression in the OOB read operation in smbcheckpermdacl occurred during the ACE-walk loop. The commit d07b26f39246 “ksmbd: requires a minimum ACE size in smbcheckpermdacl” introduced a transposed bounds check: c if...