CVE-2026-64391 — ksmbd: use opener credentials for ADS I/O
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file …
Published: 2026-07-25 · CVSS: 9.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7