Vulnerability in Linux Kernel Affecting SMB Client Functionality

CVE-2026-46195

What is CVE-2026-46195?

A security vulnerability exists in the Linux kernel's SMB client functionality, where improper validation of the dacloffset parameter can lead to significant security implications. This issue allows a malicious server to manipulate the dacloffset, potentially causing pointer arithmetic issues on 32-bit builds. Such manipulation could allow an attacker to bypass security checks and access or alter sensitive data through the derived DACL pointer, particularly affecting operations like chmod and chown. The issue has been addressed by implementing rigorous numerical validation of the dacloffset parameter prior to the construction of any DACL pointer, ensuring stronger protection against potential exploitation.

References