SB20260812439 - Out-of-bounds read in Linux kernel smb server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260812439

SB20260812439 - Out-of-bounds read in Linux kernel smb server

Published: August 12, 2026

Security Bulletin ID SB20260812439
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Information disclosure

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds read (CVE-ID: CVE-2026-68098)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to an out-of-bounds read in set_posix_acl_entries_dacl() in ksmbd when processing a DACL whose ACE copying stops early because size accounting overflows. A local user can provide a crafted DACL that causes the dedup walk to scan past the copied ACE array and disclose sensitive information.

The issue occurs because the dedup walk is bounded by the original NT ACE count rather than the number of ACEs actually copied into the rebuilt DACL.


Remediation

Install update from vendor's website.

References