Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the requested creation mode. Do not mutate the parent ACL or overwrite the child's VFS-computed access and default ACLs afterwards. This preserves restrictive ACL_MASK entries and prevents SMB object creation from widening effective permissions.
CVSS Score
HIGH
References
- https://git.kernel.org/stable/c/0093909becbda22b62b39b654dbc607faed59cd0
- https://git.kernel.org/stable/c/4a19bb1c45667f5a5f6eff9cf6648e0f692d046f
- https://git.kernel.org/stable/c/591acf171644de590cda245fd8595b473a1beb70
- https://git.kernel.org/stable/c/e148e567a9252643baa125cb65d7ae9c2c6cf68a
FAQ
What is CVE-2026-93786?
CVE-2026-93786 is a vulnerability with a CVSS score of 8.1 (HIGH). In the Linux kernel, the following vulnerability has been resolved: ksmbd: preserve VFS inherited POSIX ACL mask The VFS initializes a child's POSIX ACL from the parent's default ACL and the request...
How severe is CVE-2026-93786?
CVE-2026-93786 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-93786?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.