THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64393 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and L

[NVD] CVE-2026-64393 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SET_INFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and L

lownvdPublished 2026-07-25

CVE-2026-64393 CVSS: 9.1 CRITICAL Published: 2026-07-25T10:17:22.663

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: run set info with opener credentials

SMB2 SET_INFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the current ksmbd worker credentia

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-64393cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64393