Log in Start free

Vulnerability · Published Aug 15, 2026 · Assigned by Linux

CVE-2026-68457ksmbd: use opener credentials for FSCTL mutations

Critical 9.1

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 46.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use opener credentials for FSCTL mutations SET_SPARSE, SET_ZERO_DATA and SET_COMPRESSION operate on an open SMB handle but call VFS xattr, fallocate or fileattr helpers with the current ksmbd worker credentials. Those helpers can revalidate inode permissions, ownership and LSM policy independently of the SMB handle access mask. Run each operation with the credentials captured in the target file when the handle was opened. Keep credential handling local to these single-file FSCTLs rather than applying session credentials to the complete IOCTL handler, which also contains handle-less and multi-handle operations.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.180-1DEBIAN-CVE-2026-68457
Debian:13linux6.12.100-1DEBIAN-CVE-2026-68457
Debian:14linux7.1.5-1DEBIAN-CVE-2026-68457
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux6.8.0-147.147UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux7.0.0-34.34UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux7.0.0-34.34USN-8816-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-aws6.8.0-1067.70UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-aws7.0.0-1013.13USN-8816-1
Ubuntu:26.04:LTSlinux-aws7.0.0-1013.13UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1013.13~24.04.1USN-8816-1
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure6.8.0-1071.79UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-azure7.0.0-1017.17UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1017.17~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1069.76UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1016.16UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gcp6.8.0-1071.79UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-gcp7.0.0-1013.13UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-gcp7.0.0-1013.13USN-8816-2
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1013.13~24.04.1USN-8816-2
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gke6.8.0-1066.74UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-gke7.0.0-1007.8UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-gke7.0.0-1007.8USN-8816-4
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1052.56UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-34.34~24.04.1USN-8816-1
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-34.34~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-ibm6.8.0-1067.68UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-ibm7.0.0-1014.14UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-ibm7.0.0-1014.14USN-8816-1
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-147.147.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1024.25~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2022.23UBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1014.14UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1014.14USN-8816-2
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oracle6.8.0-1064.67UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-oracle7.0.0-1012.12USN-8816-1
Ubuntu:26.04:LTSlinux-oracle7.0.0-1012.12UBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1012.12~24.04.1USN-8816-3
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1012.12~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-raspi7.0.0-1020.20UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-raspi7.0.0-1020.20USN-8816-1
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-realtime7.0.0-34.34.1UBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-realtime7.0.0-34.34.1USN-8816-1
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-68457
Ubuntu:26.04:LTSlinux-riscv7.0.0-34.34.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-34.34.1~24.04.1UBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-68457
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-68457
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-68457

Affected products (as reported)

VendorProductVersions
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before a8c18434e1f0d9f7989170bdb0490c0160baf065e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before 1e112c47ec5dd1942e2d4ca6e8e9b712238e20c2e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before fb1cae6302d58414ddf029e3f642711bd30243f7e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before e205f3e7e8c31a47cd11efb6cf663a527177e432e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before cfb2c6f71d61ed807c9d7a7af331d406f1f31877e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 – before c6394bcaf254c5baf9aff43376020be5db6d3316
Linux Linux 5.15

References