{"id":"CVE-2026-64379","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.4, < 5.10.261","linux_kernel >= 5.11, < 5.15.212","linux_kernel >= 5.16, < 6.1.178","linux_kernel >= 6.2, < 6.6.145","linux_kernel >= 6.7, < 6.12.96","linux_kernel >= 6.13, < 6.18.39","linux_kernel >= 6.19, < 7.1.4","linux_kernel = 7.2"],"patched":["linux_kernel 7.1.4"],"published":"2026-07-25","updated":"2026-09-08","sourceUpdated":"2026-09-08T14:08:51.350","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-64379","references":[{"url":"https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00309,"epssPercentile":0.2394,"ingestedAt":"2026-07-27T06:16:50.937Z","slug":"CVE-2026-64379","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode SID to cf_mode without masking to\n07777. Apply the correct masking, same as in the read path.\n\n## Affected\n\n- `linux_kernel >= 5.4, < 5.10.261`\n- `linux_kernel >= 5.11, < 5.15.212`\n- `linux_kernel >= 5.16, < 6.1.178`\n- `linux_kernel >= 6.2, < 6.6.145`\n- `linux_kernel >= 6.7, < 6.12.96`\n- `linux_kernel >= 6.13, < 6.18.39`\n- `linux_kernel >= 6.19, < 7.1.4`\n- `linux_kernel = 7.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 7.1.4`","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}