THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64388 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE

[NVD] CVE-2026-64388 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: smb/client: fix chown/chgrp with SMB3 POSIX Extensions Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE

lownvdPublished 2026-07-25

CVE-2026-64388 CVSS: 7.8 HIGH Published: 2026-07-25T10:17:22.127

In the Linux kernel, the following vulnerability has been resolved:

smb/client: fix chown/chgrp with SMB3 POSIX Extensions

Ownership (chown) and group (chgrp) modifications were being ignored when mounting with SMB3 POSIX Extensions unless CIFS_MOUNT_CIFS_ACL or CIFS_MOUNT_MODE_FROM_SID were also explicitly set.

Fix this by check

Indicators of compromise

CVE-2026-64388cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64388