SB20260928379 - Improper access control in Linux kernel smb client

Description

This security bulletin contains information about 1 vulnerability.

1) Improper access control (CVE-ID: CVE-2026-97561)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to control local file ownership.

The vulnerability exists due to improper access control in the Linux kernel CIFS/SMB client SID-to-UID/GID mapping logic when processing SMB server-provided SID ownership data. A remote attacker can provide SID ownership values to control local file ownership.

Only mounts configured with the forceuid or forcegid mount options are affected.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/18a72975e9f35aadecc75b031f693f2d1f49308f
• https://git.kernel.org/stable/c/e1b74f8f8c1d13190b09fe623b729d36b7ac22a8