NetSight
IP …
high7.5

CVE-2026-64395

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE pas…

Impact

In the Linux kernel, the following vulnerability has been resolved: ksmbd: require source read access for duplicate extents FSCTL_DUPLICATE_EXTENTS_TO_FILE passes the source file directly to vfs_clone_file_range() or vfs_copy_file_range() without checking the SMB access mask granted to the source handle. A handle opened with attribute access can consequently be used to copy file contents into an attacker-readable destination. Require FILE_READ_DATA on the source handle before either VFS operation, matching other ksmbd data-copy paths.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15 before 6.1.178
from 6.2 before 6.6.145
from 6.7 before 6.12.96
from 6.13 before 6.18.39
from 6.19 before 7.1.4

References