High 7.5Published Jul 25, 2026

CVE-2026-64395ksmbd: require source read access for duplicate extents

Updated under an hour ago (Oct 27, 2026, 5:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the source file directly to vfs_clone_file_range() or vfs_copy_file_range() without checking the SMB access mask granted to the source handle. A handle opened with attribute access can consequently be used to copy file contents into an attacker-readable destination. Require FILE_READ_DATA on the source handle before either VFS operation, matching other ksmbd data-copy paths.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from eb817368f50c1cbe1bd07044124aad7db6330e3a before 2d2ab6983620c2d60ce7db72133984ca3873b929; from eb817368f50c1cbe1bd07044124aad7db6330e3a before 67bdad9cf01b25030e3bf00bbce6c309319d6663; from eb817368f50c1cbe1bd07044124aad7db6330e3a before b0d4d5cb846a1ddb7aaab9adfb5986e4540e6e5f; from eb817368f50c1cbe1bd07044124aad7db6330e3a before db231af842868268839f9f9619c68cb27830d8be; from eb817368f50c1cbe1bd07044124aad7db6330e3a before a10942af27832c2761d020863a46e79bebe0567d; from eb817368f50c1cbe1bd07044124aad7db6330e3a before cedff600f1642aa982178503552f0d007bc829c8	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.1.178; from 6.2 before 6.6.145; from 6.7 before 6.12.96; from 6.13 before 6.18.39; from 6.19 before 7.1.4	NVD

References

References

https://git.kernel.org/stable/c/2d2ab6983620c2d60ce7db72133984ca3873b929	patch
https://git.kernel.org/stable/c/67bdad9cf01b25030e3bf00bbce6c309319d6663	patch
https://git.kernel.org/stable/c/b0d4d5cb846a1ddb7aaab9adfb5986e4540e6e5f	patch
https://git.kernel.org/stable/c/db231af842868268839f9f9619c68cb27830d8be	patch
https://git.kernel.org/stable/c/a10942af27832c2761d020863a46e79bebe0567d	patch
https://git.kernel.org/stable/c/cedff600f1642aa982178503552f0d007bc829c8	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.