Threats tagged 'ghsa-7xq8-4f3j-v3g7'

CVE-2026-93282 is a vulnerability in the Linux kernel's ksmbd component related to incorrect handling of access control checks. The flaw causes the system to ignore the Authenticated Users ACE during permission evaluation, leading to erroneous access denials. It also improperly combines access masks from all ACEs regardless of relevance, potentially granting unintended rights. The issue has been fixed by adjusting the access check logic to properly consider Authenticated Users and to accumulate permissions correctly.