In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78 cve-icon
https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14 cve-icon
https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d cve-icon
https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d cve-icon
https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 cve-icon
https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef cve-icon
https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94 cve-icon
https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954 cve-icon
https://lore.kernel.org/linux-cve-announce/2026072525-CVE-2026-64379-242b@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-64379 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-64379 cve-icon
History

Thu, 30 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-279
References
Metrics threat_severity

None

 threat_severity

Moderate

Mon, 27 Jul 2026 05:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H'}

Sun, 26 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.
Title smb: client: mask server-provided mode to 07777 in modefromsid
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-25T08:50:29.717Z

Updated: 2026-07-27T05:00:07.664Z

Reserved: 2026-07-19T15:36:31.784Z

Link: CVE-2026-64379

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-07-25T00:00:00Z

Links: CVE-2026-64379 - Bugzilla