Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64380

In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid[1] so all client paths that reuse the helper reject truncated POSIX SIDs safely.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c79ec3fa0c79ecb7b87b4b01328ed0223b1844f898f1578b46f306a3b1d4f14d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"171605aed68380c2fa75dff9b3a1ed427c50065b","status":"affected","version":"349e13ad30b45998bb9937cfe0b32be6f951976d","versionType":"git"},{"lessThan":"4213c1208978483021d7d125c131de3985d38f61","status":"affected","version":"349e13ad30b45998bb9937cfe0b32be6f951976d","versionType":"git"},{"lessThan":"96e889bc1e759c83f25093e8c2f3da31b4973f30","status":"affected","version":"349e13ad30b45998bb9937…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.7"},{"lessThan":"5.7","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"171605aed68380c2fa75dff9b3a1ed427c50065b","status":"affected","version":"349e13ad30b45998bb9937cfe0b32be6f951976d","versionType":"git"},{"lessThan":"4213c1208978483021d7d125c131de3985d38f61","status":"affected","version":"349e13ad30b45998bb9937cfe0b32be6f951976d","versionType":"git"},{"lessThan":"96e889bc1e759c83f25093e8c2f3da31b4973f30","status":"affected","version":"349e13ad30b45998bb9937…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0de5b8e76847f5de26f364a82c6602c4881c30da"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/171605aed68380c2fa75dff9b3a1ed427c50065b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/4213c1208978483021d7d125c131de3985d38f61"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/427eb7eb46425fec845a43e861f3d6e2899cae59"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/46a84715a015cb48e1b9c219dc88c03d8a541ea4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/7ad2bcf2441430bb2e918fb3ef9a90d775a6e422"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/86c5d470f5d42e61123b2f4b4f0b91f4eee5b980"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/96e889bc1e759c83f25093e8c2f3da31b4973f30"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c358c0689998b91ec0c29971e3de4fa23b6adbd785bd80982658efcb9d5c72f0 · sha256:6ed59a93d9262bf4… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer