In the Linux kernel, the following vulnerability has been resolved:
ksmbd: run set info with opener credentials
SMB2 SET_INFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the current ksmbd worker credentials.
Run the complete SET_INFO dispatch with the credentials captured when the handle was opened. This also removes the separate security information credential setup and keeps all SET_INFO classes under one credential scope.
Direct override_creds() is used because it can nest with the request credential overrides already used by rename and link helpers.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.12Upgrade linux-6.1 | Jul 28, 2026 | Jul 28, 2026 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1012-awsUpgrade linux-image-oem-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-7.0.0-2018-nvidia-bos-64kUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-2018-nvidia-bosUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-aws-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1018-nvidiaUpgrade linux-image-gke-64k-7.0Upgrade linux-image-nvidia-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-7.0.0-1013-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1019-raspi-realtimeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-31-realtime-64kUpgrade linux-image-oem-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1018-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1019-raspiUpgrade linux-image-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-31-genericUpgrade linux-image-7.0.0-1006-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-aws-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-31-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-7.0.0-1013-ibmUpgrade linux-image-7.0.0-31-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-7.0.0-1012-aws-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oem-26.04bUpgrade linux-image-7.0.0-1006-gkeUpgrade linux-image-virtualUpgrade linux-image-virtual-7.0Upgrade linux-image-realtimeUpgrade linux-image-gke-hwe-26.04 | Sep 14, 2026 | Sep 7, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 31, 2026 | Jul 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub