InfoSec Signals™
Sign InStart Free
Back to CVE records
Critical 9.8Published Jul 25, 2026

CVE-2026-64391ksmbd: use opener credentials for ADS I/O

Updated under an hour ago ()

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.

CVSS
9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Modified
Record last updated
Oct 21, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from f44158485826c076335d6860d35872271a83791d before 2ad5509dd576ae16d252d4698daf03002f9e0234; from f44158485826c076335d6860d35872271a83791d before a8f5d39971bbad9340d49cd41b0e2da9452a649d; from f44158485826c076335d6860d35872271a83791d before 2b4592cea214683de0f2ce6f8c22c097fb0ea1ab; from f44158485826c076335d6860d35872271a83791d before 52a56cf53ec834c44ac1b4d16d585f26613ee5ce; from f44158485826c076335d6860d35872271a83791d before baa5e094886fffa7e6272edcb5e08be5ce28262c
CNA record
linux linux_kernel
linux:linux_kernel
from 5.15 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4
NVD

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.