CVE-2026-64391
⛔ criticalSummary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for ADS I/O Alternate data streams are stored as xattrs. Unlike regular file I/O, their read and write paths therefore call VFS xattr helpers which recheck inode permissions and LSM policy using the current task credentials. Run ADS I/O with the credentials captured when the SMB handle was opened.
CVSS Score
9.8
Critical
EPSS Score
0.5
Exploit Probability
Published Date
2026-07-25
First Seen: 2026-07-31
📊 Relative Risk Intelligence
This CVE is Very High Risk - more severe than 90.5% of all 340,405 vulnerabilities in our database.
#32,269
Top 10% most severe
Severity Percentile
Last Modified
2026-07-27
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H