{"id":"CVE-2026-90176","revision":"5d4f90f1c194406b84f9d255fa7c4b9b","records":[{"revision":"5d4f90f1c194406b84f9d255fa7c4b9b","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-90176","aliases":[],"title":"ksmbd: Do not skip lock checks for single-byte ranges","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: Do not skip lock checks for single-byte ranges\n\ncheck_lock_range() uses inclusive ranges. Its callers pass the end\noffset as start + length - 1, so start == end represents a valid\nsingle-byte range rather than an empty range.\n\nThe start == end shortcut therefore skips mandatory byte-range lock\nchecks for one-byte reads, writes, copychunk operations and one-byte\ntruncate ranges. A conflicting lock covering that byte is not checked\nand the operation is allowed to proceed.\n\nRemove the shortcut. The truncate size == inode->i_size case is already\nhandled by only calling check_lock_range() when the new size differs\nfrom the current file size.","state":0,"publishedAt":"2026-09-17T16:07:02.433+00:00","modifiedAt":"2026-10-19T08:59:13.411+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/server/vfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"52fcbb92e0d3acfd1448b2a43b6595d540da5295\",\n                            \"lessThan\": \"a89cc145832e81c32199d4ca2e1ea8bd51ed601d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"da29cd197246c85c0473259f1cad897d9d28faea\",\n                            \"lessThan\": \"993e0158331d37c04da18efe551b5e1e35fb3078\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a6f4cfa3783804336491e0edcb250c25f9b59d33\",\n                            \"lessThan\": \"f751d6e39d4c937c45f8fedc66699aa7d2d52288\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"571204e4758a528fbd67330bd4b0dfbdafb33dd8\",\n                            \"lessThan\": \"84c2d8e807ac489f5c91769293fb15dfdae8bae8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d510ac31626ed157d2182149559430350cf2104\",\n                            \"lessThan\": \"07a9e289ff7edcc004f58952405f8a65c4e37512\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"5d510ac31626ed157d2182149559430350cf2104\",\n                            \"lessThan\": \"d40c24634fe077a0dc91fd11fccf44ce12b454d5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThan\": \"6.1.188\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThan\": \"6.6.157\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.64\",\n                            \"lessThan\": \"6.12.110\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.3\",\n                            \"lessThan\": \"6.18.52\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/smb/server/vfs.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.19\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.19\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","score":8.1,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/a89cc145832e81c32199d4ca2e1ea8bd51ed601d","https://git.kernel.org/stable/c/993e0158331d37c04da18efe551b5e1e35fb3078","https://git.kernel.org/stable/c/f751d6e39d4c937c45f8fedc66699aa7d2d52288","https://git.kernel.org/stable/c/84c2d8e807ac489f5c91769293fb15dfdae8bae8","https://git.kernel.org/stable/c/07a9e289ff7edcc004f58952405f8a65c4e37512","https://git.kernel.org/stable/c/d40c24634fe077a0dc91fd11fccf44ce12b454d5"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-90176","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-90176","identifiers":["CVE-2026-90176"]},"retained":false,"historicalAffected":[]}],"coverage":[]}