THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68100 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.num_s

[NVD] CVE-2026-68100 (HIGH 8.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.num_s

mednvdPublished 2026-08-10

CVE-2026-68100 CVSS: 8.1 HIGH Published: 2026-08-10T13:19:54.533

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl

set_ntacl_dacl() copies each ACE from the attacker-controlled stored security descriptor verbatim into the response DACL without checking sid.num_subauth. The ACE bytes (including an unchecked num_suba

Indicators of compromise

CVE-2026-68100cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68100