Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CRITICAL: CVE-2026-64391 (CVSS 9.8) Linux kernel ksmbd vulnerability allows unauthorized access via alternate data streams. Network exploitable, no auth required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/tadgD6VbLn
Post summary
The tweet reveals a critical Linux kernel ksmbd flaw, provides technical details, and urges users to apply an immediate patch, but does not include a PoC or evidence of current exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |