CVE-2026-52944
Description
A flaw was found in the Linux kernel's ksmbd component. This vulnerability allows a client to bypass intended permission restrictions by using the FSCTL_SET_SPARSE operation. Specifically, a client on a read-only share can modify a file's sparse attribute, and clients on writable shares can modify this attribute without the necessary FILE_WRITE_DATA or FILE_WRITE_ATTRIBUTES access. This can lead to unauthorized changes to file properties.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
