ZDI-26-1003: Linux Kernel ksmbd smb_inherit_dacl Out-Of-Bounds Read Information Disclosure Vulnerability
Summary: ZDI-26-1003 describes an out-of-bounds read in the Linux kernel's ksmbd handling of inherited security descriptors, caused by missing validation of user-supplied data that lets a read run past the end of an allocated buffer. Exploitation requires authentication and only affects systems with ksmbd enabled, and Linux has issued an update correcting the flaw.
Why it matters: The information disclosure is not the end state: the advisory states an attacker can combine it with other vulnerabilities to execute arbitrary code in the kernel context, so any authenticated user on a host running ksmbd is working from a foothold that can reach the kernel itself.
Read the original at Zero Day Initiative ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-64138
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026