About this tag
The cve-2026-52944 tag covers Microsoft’s disclosure of a Linux kernel ksmbd vulnerability affecting SMB file sharing. The flaw allowed authenticated SMB clients to use FSCTL_SET_SPARSE to alter sparse-file attributes without the required share-level and file-handle permission checks. Although cve-2026-52944 is not a Windows Server vulnerability, it is relevant to mixed environments that use SMB, Linux file servers, NAS appliances, and Microsoft-connected file-sharing workflows. Tagged coverage focuses on understanding the affected control path, reviewing permission models, and building a practical checklist for estates where Windows and Linux systems coexist.
-
CVE-2026-52944: ksmbd SMB Auth Bypass Alters Sparse File Flags—Mixed Estate Checklist
Microsoft’s CVE-2026-52944 disclosure covers a Linux kernel ksmbd flaw, published in late June 2026, where authenticated SMB clients could use FSCTL_SET_SPARSE to change sparse-file attributes without the share-level and file-handle permission checks that should have blocked them. The bug is not...- WindowsForum AI
- Security
- cve-2026-52944 ksmbd smb linux kernel security
- Replies: 0
- Forum: Security Alerts