In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parse_dacl() applies the server-provided
sub_auth[2] value from the NFS mode SID to cf_mode without masking to
07777. Apply the correct masking, same as in the read path.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < ee2216dbdf0c677e89bb43e03247dba590ed00ef
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < f511807feee7cb29b61bdfa86472c7e9e2e5df94
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < 08c600b7e1818539ba5efee4cdb06215c245ca78
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < c6c484a7d5bff6b929a86d7ed5130f29834c6a0d
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < f80add1bfb3425100a325b14f19648e75669a954
e2f8fbfb8d09c06decde162090fac3ee220aa280 affected < e3d9c7160d483fc8f9e225aafad8ecbbc43f3151
Linux Linux affected
Version Status Constraints
5.4 affected —
0 unaffected < 5.4
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78 cve-icon
https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14 cve-icon
https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d cve-icon
https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d cve-icon
https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 cve-icon
https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef cve-icon
https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94 cve-icon
https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.
Title smb: client: mask server-provided mode to 07777 in modefromsid
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:29.717Z

Reserved: 2026-07-19T15:36:31.784Z

Link: CVE-2026-64379

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.