Security Advisory
CVE-2026-64380
8.2
HIGH
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: harden POSIX SID length parsing
posix_info_sid_size() reads sid[1] to obtain the subauthority count,
but its existing boundary check still accepts buffers with only one
remaining byte. Require two bytes before reading sid[1] so all client
paths that reuse the helper reject truncated POSIX SIDs safely.
Published Date
July 25, 2026
Official Source
NIST NVD Advisory