THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-64139 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd: use check_add_overflow() to prevent u16 DACL size overflow") added check_add_overflow() guards that break out

[NVD] CVE-2026-64139 (MEDIUM 5.5) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Commit 299f962c0b02 ("ksmbd: use check_add_overflow() to prevent u16 DACL size overflow") added check_add_overflow() guards that break out

lownvdPublished 2026-07-19

CVE-2026-64139 CVSS: 5.5 MEDIUM Published: 2026-07-19T16:17:55.780

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Commit 299f962c0b02 ("ksmbd: use check_add_overflow() to prevent u16 DACL size overflow") added check_add_overflow() guards that break out of the ACE-building loops in set_posix_acl_entries_d

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64139