CVE-2026-64138

Vendor

Linux kernel, Microsoft

Product

Linux kernel

CVSS

7.1

EPSS

0.004 (p39)

Exposure class

Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 42
   ZDI advisory ZDI 19h ago

   Linux Kernel ksmbd smb_inherit_dacl Out-Of-Bounds Read Information Disclosure Vulnerability

   This vulnerability allows remote attackers to disclose sensitive information on affected installations of Linux Kernel. Authentication is required to exploit this vulnerability. However, only systems with ksmbd enabled are…

   CVSS 7.1 CVE-2026-64138 Linux kernel
2. 25
   Advisory MSRC 21 Jul 2026

   CVE-2026-64138 ksmbd: validate SID in parent security descriptor during ACL inheritance

   Information published.

   CVE-2026-64138 Microsoft Linux kernel