CVE-2026-64398
Description
A flaw was found in the Linux kernel's ksmbd component. An authenticated Server Message Block (SMB) client with only FILE_WRITE_ATTRIBUTES permission can bypass a security check in the FSCTL_SET_ZERO_DATA function. This allows the client to zero out file data, leading to data destruction and a denial of service.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
A user can access restricted functionality and/or sensitive information that may include administrative functionality and user accounts.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
