CVE-2026-93786
High
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and default ACLs afterwards. This preserves restrictive ACL_MASK entries and prevents SMB object creation from widening effective permissions.
SeverityHigh
CVSS8.1
Exploit probability28. percentile0.3%
Product
Linux
PublishedSep 24, 2026
First seenSep 24, 2026
How to fix
Update
- Linux Linux8493da704275ca5ab67fb88c0ae7b71576e91951, 4a19bb1c45667f5a5f6eff9cf6648e0f692d046f, 591acf171644de590cda245fd8595b473a1beb70, 0093909becbda22b62b39b654dbc607faed59cd0, e148e567a9252643baa125cb65d7ae9c2c6cf68a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | f44158485826c076335d6860d35872271a83791d ≤ v < 8493da704275ca5ab67fb88c0ae7b71576e91951, f44158485826c076335d6860d35872271a83791d ≤ v < 4a19bb1c45667f5a5f6eff9cf6648e0f692d046f, f44158485826c076335d6860d35872271a83791d ≤ v < 591acf171644de590cda245fd8595b473a1beb70, f44158485826c076335d6860d35872271a83791d ≤ v < 0093909becbda22b62b39b654dbc607faed59cd0, f44158485826c076335d6860d35872271a83791d ≤ v < e148e567a9252643baa125cb65d7ae9c2c6cf68a, 5.15 | 8493da704275ca5ab67fb88c0ae7b71576e91951, 4a19bb1c45667f5a5f6eff9cf6648e0f692d046f, 591acf171644de590cda245fd8595b473a1beb70, 0093909becbda22b62b39b654dbc607faed59cd0, e148e567a9252643baa125cb65d7ae9c2c6cf68a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.