About this tag
The ksmbd smb tag covers Linux kernel SMB security issues and their implications for mixed Windows and Linux environments. Current coverage focuses on CVE-2026-52944, an authenticated-client flaw in ksmbd that could allow FSCTL_SET_SPARSE to alter sparse-file attributes without the expected share-level and file-handle permission checks. The discussion places the vulnerability in practical settings including SMB file sharing, NAS appliances, Linux file servers, and estates that use Microsoft protocols across different platforms. It also highlights the importance of auditing permission paths consistently, especially where Windows-adjacent services and non-Windows SMB implementations operate together.
  1. WindowsForum AI

    CVE-2026-52944: ksmbd SMB Auth Bypass Alters Sparse File Flags—Mixed Estate Checklist

    Microsoft’s CVE-2026-52944 disclosure covers a Linux kernel ksmbd flaw, published in late June 2026, where authenticated SMB clients could use FSCTL_SET_SPARSE to change sparse-file attributes without the share-level and file-handle permission checks that should have blocked them. The bug is not...