{"id":"CVE-2026-64379","revision":"6ddeaf2a10154551b2227b13936ca41f","records":[{"revision":"6ddeaf2a10154551b2227b13936ca41f","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-64379","aliases":[],"title":"smb: client: mask server-provided mode to 07777 in modefromsid","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: mask server-provided mode to 07777 in modefromsid\n\nWhen modefromsid is active, parse_dacl() applies the server-provided\nsub_auth[2] value from the NFS mode SID to cf_mode without masking to\n07777. Apply the correct masking, same as in the read path.","state":0,"publishedAt":"2026-07-25T08:50:29.717+00:00","modifiedAt":"2026-10-19T20:38:25.713+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/client/cifsacl.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"ee2216dbdf0c677e89bb43e03247dba590ed00ef\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"f511807feee7cb29b61bdfa86472c7e9e2e5df94\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"08c600b7e1818539ba5efee4cdb06215c245ca78\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"c6c484a7d5bff6b929a86d7ed5130f29834c6a0d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"f80add1bfb3425100a325b14f19648e75669a954\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e2f8fbfb8d09c06decde162090fac3ee220aa280\",\n                            \"lessThan\": \"e3d9c7160d483fc8f9e225aafad8ecbbc43f3151\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/client/cifsacl.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.4\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.96\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.39\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.4\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","score":7.1,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14","https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef","https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94","https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78","https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d","https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d","https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954","https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64379","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-64379","identifiers":["CVE-2026-64379"]},"retained":false,"historicalAffected":[]}],"coverage":[]}