CVE-2026-64388
- Source
- https://cve.org/CVERecord?id=CVE-2026-64388
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64388.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-64388
- Downstream
AZL (1)
BELL (1)
CGA (97)
- CGA-25rh-9jrg-9jr8
- CGA-29wv-r9pv-c8pc
- CGA-2vxp-x826-r5gp
- CGA-39g2-279m-x8c4
- CGA-3hph-c24m-p9gx
- CGA-3mm9-xfm2-m68g
- CGA-3p96-473c-phrm
- CGA-422q-4c7g-5mh2
- CGA-439p-qgm5-v682
- CGA-4c8j-gxq7-fj6c
- CGA-4p7g-qhx4-vm76
- CGA-4r22-h85w-62vw
- CGA-53mf-r74x-7vp6
- CGA-54gv-3mvv-2p4m
- CGA-554c-4r7f-c6wc
- CGA-5754-55jf-58j5
- CGA-583x-qvgw-436x
- CGA-58rr-qg95-jcch
- CGA-5r3h-665m-j497
- CGA-5r73-wr7r-8pxq
- CGA-5rqg-rhjj-rv7g
- CGA-5w27-6x9h-w8rw
- CGA-666m-c95r-7jjg
- CGA-6934-x39w-g5v6
- CGA-6f54-q8r9-rf6q
- CGA-6fxp-7cgw-fh3m
- CGA-6g58-q369-995p
- CGA-773h-9pjh-93qj
- CGA-8c37-7vvh-q8hw
- CGA-8wh3-cv8h-66hj
- CGA-8xc4-q6cm-4x8j
- CGA-94mh-p5g5-j332
- CGA-9hmr-cqp2-9p8w
- CGA-9w46-2hm4-67cg
- CGA-9w8j-pv5f-gxh4
- CGA-c777-89qh-px48
- CGA-cj59-3g2g-h42h
- CGA-cjh4-jpg6-c5v5
- CGA-cmm9-6xx8-hrjx
- CGA-cp8m-hc55-cv5r
- CGA-cpwf-7gjq-c5j5
- CGA-cqfq-4cx9-h8w7
- CGA-f25m-2rx8-83f7
- CGA-f3v7-f24x-p3hx
- CGA-f5pg-433g-2529
- CGA-fc89-hmxf-7php
- CGA-ffhc-4jj9-rhqr
- CGA-fj4c-w4h3-x77h
- CGA-fv8p-q8p2-pchv
- CGA-g3hq-5mh8-2m9r
- CGA-gc4x-h29p-hr4c
- CGA-ghmg-m6vh-346j
- CGA-h29w-59wm-rg8f
- CGA-hg44-x6g3-3p93
- CGA-hqvx-35ff-rphr
- CGA-hv8h-jw8g-gxw9
- CGA-hwwx-qrqq-87fj
- CGA-hx36-pp7p-j533
- CGA-hxv9-6hhv-wg5j
- CGA-j86v-rqf2-qc34
- CGA-jcxv-89q9-8rgg
- CGA-jg27-mj24-5fxm
- CGA-jj3j-2823-5q76
- CGA-jrq7-pvhq-hxrx
- CGA-jvwv-wgq7-937w
- CGA-jx7v-5ww3-jvw6
- CGA-jxqg-3j92-87hw
- CGA-mhfv-j47r-x94x
- CGA-mx72-p4f9-38rj
- CGA-p6m7-33m2-8w4c
- CGA-p6qh-85gj-3q57
- CGA-pgfq-v7q9-x5jc
- CGA-pm76-v2pf-442c
- CGA-prc8-f37c-fcrf
- CGA-pwmh-cwrx-cw88
- CGA-qf59-9m5f-8h85
- CGA-r93g-qhgf-87g7
- CGA-rh8r-54fr-3rrr
- CGA-rm28-jc54-hvjc
- CGA-v7qq-2wgq-25qm
- CGA-v9v6-r7r2-7mvj
- CGA-vc6x-vxh4-g72x
- CGA-vh48-r3q2-rjfw
- CGA-vj3r-q322-fjc4
- CGA-vppj-wrp2-726v
- CGA-vr56-2rx3-rqfg
- CGA-vrrq-3rqq-jcmp
- CGA-w3jx-wc4r-2f9q
- CGA-w527-p52j-hhmc
- CGA-w9v2-rg9q-5r9r
- CGA-wf7x-phv7-6rf8
- CGA-wm6j-p3fc-8m64
- CGA-x35f-c48x-87pp
- CGA-x3h9-4jmx-jq8c
- CGA-x3qm-486j-4hrj
- CGA-x5q6-5625-h4g5
- CGA-xj36-hhvp-5q29
DEBIAN (1)
OESA (2)
openSUSE (2)
ROOT (3)
SUSE (11)
- Related
- Published
- 2026-07-25T08:50:36Z
- Modified
- 2026-10-24T02:35:35Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- smb/client: fix chown/chgrp with SMB3 POSIX Extensions
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix chown/chgrp with SMB3 POSIX Extensions
Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE_FROM_SID were also explicitly set.
Fix this by checking for posix_extensions in cifs_setattr_nounix() when updating UID and GID, ensuring that id_mode_to_cifs_acl() is called to map and set the ownership/group information on the server.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64388.json" }- References
-
- https://git.kernel.org/stable/c/27ead8c5418af6bfab711079fecb9414d78d4cae
- https://git.kernel.org/stable/c/3eaec47518e126e6dcd1a48521d740278073f0ec
- https://git.kernel.org/stable/c/550cfb8a81181331d4d0f76ab75ee58a0bf41e3e
- https://git.kernel.org/stable/c/6825a45f6b8ef76b0ee32649ec3d6e39ca143a18
- https://git.kernel.org/stable/c/760ef2c579c2609cf17fb1cd5392f64d42d43d33
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64388.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64388
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb326614ea2159ea5c835d320f261d05d080cd201Fixed6825a45f6b8ef76b0ee32649ec3d6e39ca143a18Fixed27ead8c5418af6bfab711079fecb9414d78d4caeFixed3eaec47518e126e6dcd1a48521d740278073f0ecFixed550cfb8a81181331d4d0f76ab75ee58a0bf41e3eFixed760ef2c579c2609cf17fb1cd5392f64d42d43d33