VULNERABILITY INTELLIGENCE

CVE-2026-63909

CVSS score8.1 HIGH

EPSS probability0.63%

CISA KEVNot currently listed

Published2026-07-19

Last modified2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops Commit d07b26f39246 ("ksmbd: require minimum ACE size in smb_check_perm_dacl()") introduced a transposed bounds check: if (offsetof(struct smb_ace, sid) + ace…