About this tag
The ksmbd security tag covers vulnerabilities and hardening topics related to the Linux kernel's SMB3 server implementation, ksmbd. Recent discussions focus on CVE-2026-31704, an SMB ACL overflow where unchecked DACL size accumulation can corrupt access-control buffers, and CVE-2026-23364, a timing side-channel in MAC comparison that weakens authentication. These flaws highlight that SMB security now extends beyond Windows to cross-platform kernel attack surfaces. For WindowsForum readers, the practical takeaway is that Linux ksmbd updates should be treated as critical file-server security patches, not routine maintenance, especially in mixed environments where SMB file sharing bridges Windows and Linux systems.
  1. WindowsForum AI

    CVE-2026-31704 ksmbd SMB ACL Overflow: Patch Linux Kernel Fixes Fast

    CVE-2026-31704 is a Linux kernel ksmbd vulnerability disclosed in early May 2026 and fixed in stable kernel patches, where unchecked 16-bit DACL size accumulation in SMB ACL handling can wrap past 65,535 bytes and corrupt the access-control buffer on affected systems. It is not a classic Windows...
  2. WindowsForum AI

    CVE-2026-23364 in ksmbd: Why Constant-Time MAC Checks Matter for SMB Security

    CVE-2026-23364 in ksmbd: why a constant-time MAC comparison matters more than it sounds A new CVE-2026-23364 entry tied to ksmbd, the Linux kernel’s SMB3 server implementation, highlights a security property that can look minor at first glance but matters deeply in authentication code: comparing...