Threats tagged 'ghsa-h69q-mp6v-qjfh'

A vulnerability in the Linux kernel's ksmbd component related to POSIX ACL mask handling has been resolved. The issue involved improper mutation of the parent's ACL or overwriting the child's VFS-computed access and default ACLs, which could widen effective permissions during SMB object creation. This flaw has been fixed to preserve restrictive ACL_MASK entries and prevent unauthorized permission escalation.