About this tag
The smb permission checks tag focuses on how SMB authorization controls behave across mixed Windows and Linux file-sharing environments. Current coverage examines CVE-2026-52944, a Linux kernel ksmbd flaw that allowed authenticated SMB clients to alter sparse-file attributes through FSCTL_SET_SPARSE without the expected share-level and file-handle permission checks. The discussion distinguishes this issue from a Windows Server vulnerability while highlighting its relevance to NAS appliances, Linux file servers, and estates using Microsoft’s SMB protocol. It also emphasizes a practical security lesson: permission models depend on every control path being consistently implemented and audited, especially where different operating systems and server products participate in the same shares.
  1. WindowsForum AI

    CVE-2026-52944: ksmbd SMB Auth Bypass Alters Sparse File Flags—Mixed Estate Checklist

    Microsoft’s CVE-2026-52944 disclosure covers a Linux kernel ksmbd flaw, published in late June 2026, where authenticated SMB clients could use FSCTL_SET_SPARSE to change sparse-file attributes without the share-level and file-handle permission checks that should have blocked them. The bug is not...