In the Linux kernel, the following vulnerability has been resolved:

smb: client: harden POSIX SID length parsing

posix_info_sid_size() reads sid[1] to obtain the subauthority count,
but its existing boundary check still accepts buffers with only one
remaining byte. Require two bytes before reading sid[1] so all client
paths that reuse the helper reject truncated POSIX SIDs safely.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 171605aed68380c2fa75dff9b3a1ed427c50065b
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 4213c1208978483021d7d125c131de3985d38f61
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 96e889bc1e759c83f25093e8c2f3da31b4973f30
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 0de5b8e76847f5de26f364a82c6602c4881c30da
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 427eb7eb46425fec845a43e861f3d6e2899cae59
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 86c5d470f5d42e61123b2f4b4f0b91f4eee5b980
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 46a84715a015cb48e1b9c219dc88c03d8a541ea4
349e13ad30b45998bb9937cfe0b32be6f951976d affected < 7ad2bcf2441430bb2e918fb3ef9a90d775a6e422
Linux Linux affected
Version Status Constraints
5.7 affected —
0 unaffected < 5.7
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0de5b8e76847f5de26f364a82c6602c4881c30da cve-icon
https://git.kernel.org/stable/c/171605aed68380c2fa75dff9b3a1ed427c50065b cve-icon
https://git.kernel.org/stable/c/4213c1208978483021d7d125c131de3985d38f61 cve-icon
https://git.kernel.org/stable/c/427eb7eb46425fec845a43e861f3d6e2899cae59 cve-icon
https://git.kernel.org/stable/c/46a84715a015cb48e1b9c219dc88c03d8a541ea4 cve-icon
https://git.kernel.org/stable/c/7ad2bcf2441430bb2e918fb3ef9a90d775a6e422 cve-icon
https://git.kernel.org/stable/c/86c5d470f5d42e61123b2f4b4f0b91f4eee5b980 cve-icon
https://git.kernel.org/stable/c/96e889bc1e759c83f25093e8c2f3da31b4973f30 cve-icon
History

Sat, 25 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid[1] so all client paths that reuse the helper reject truncated POSIX SIDs safely.
Title smb: client: harden POSIX SID length parsing
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-25T08:50:30.476Z

Reserved: 2026-07-19T15:36:31.784Z

Link: CVE-2026-64380

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-25T16:00:05Z

Weaknesses

No weakness.