---
id: CVE-2024-26822
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb: client: set correct id, uid and cruid for multiuser automounts

  When uid, gid and cruid are not specified, we need to dynamically
  set them into the filesystem cont…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb: client: set correct id, uid and cruid for multiuser automounts

  When uid, gid and cruid are not specified, we need to dynamically
  set them into the filesystem cont…
severity: high
cvss: 8.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 6.2, < 6.6.18'
  - 'linux_kernel >= 6.7, < 6.7.6'
  - linux_kernel = 5.15.124
  - linux_kernel = 6.1.54
  - linux_kernel = 6.8
patched:
  - linux_kernel 6.7.6
published: '2024-04-17'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26822'
references:
  - url: 'https://git.kernel.org/stable/c/2ceba8ae1bd1f5589548cb722a5c583ca3a2dede'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4508ec17357094e2075f334948393ddedbb75157'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4a6e4c56721a3e6e2550b72ec56aab306c4607a7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7590ba9057c6d74c66f3b909a383ec47cd2f27fb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c2aa2718cda2d56b4a551cb40043e9abc9684626'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4508ec17357094e2075f334948393ddedbb75157'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/7590ba9057c6d74c66f3b909a383ec47cd2f27fb'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/c2aa2718cda2d56b4a551cb40043e9abc9684626'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00232
epssPercentile: 0.12486
ingestedAt: '2026-08-05T10:46:49.482Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

smb: client: set correct id, uid and cruid for multiuser automounts

When uid, gid and cruid are not specified, we need to dynamically
set them into the filesystem context used for automounting otherwise
they'll end up reusing the values from the parent mount.

## Affected

- `linux_kernel >= 6.2, < 6.6.18`
- `linux_kernel >= 6.7, < 6.7.6`
- `linux_kernel = 5.15.124`
- `linux_kernel = 6.1.54`
- `linux_kernel = 6.8`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.6`