cve-2026-23364

CVE-2026-23364 is a security vulnerability in ksmbd, the Linux kernel's SMB3 server implementation. The issue involves a non-constant-time MAC comparison in authentication code, which could potentially allow timing attacks. Microsoft's Security Update Guide references this vulnerability, and it has been addressed through fixes in recent Linux kernels and downstream distributions. Discussions on WindowsForum cover the technical details of why constant-time MAC checks are important for SMB security, the nature of the flaw, and the broader context of ongoing security improvements in ksmbd.