Answer in brief
CVE-2026-64379 records a Unknown severity vulnerability in smb: client: mask server-provided mode to 07777 in modefromsid. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-64379 records a Unknown severity vulnerability in smb: client: mask server-provided mode to 07777 in modefromsid. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <ee2216dbdf0c677e89bb43e03247dba590ed00ef || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <f511807feee7cb29b61bdfa86472c7e9e2e5df94 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <08c600b7e1818539ba5efee4cdb06215c245ca78 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <c6c484a7d5bff6b929a86d7ed5130f29834c6a0d || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <f80add1bfb3425100a325b14f19648e75669a954 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 | 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14, ee2216dbdf0c677e89bb43e03247dba590ed00ef, f511807feee7cb29b61bdfa86472c7e9e2e5df94, 08c600b7e1818539ba5efee4cdb06215c245ca78, b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d, c6c484a7d5bff6b929a86d7ed5130f29834c6a0d, f80add1bfb3425100a325b14f19648e75669a954, e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 |
| Linux/Linuxgeneric | 5.4 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <ee2216dbdf0c677e89bb43e03247dba590ed00ef || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <f511807feee7cb29b61bdfa86472c7e9e2e5df94 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <08c600b7e1818539ba5efee4cdb06215c245ca78 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <c6c484a7d5bff6b929a86d7ed5130f29834c6a0d || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <f80add1bfb3425100a325b14f19648e75669a954 || >=e2f8fbfb8d09c06decde162090fac3ee220aa280 <e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 | 5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14, ee2216dbdf0c677e89bb43e03247dba590ed00ef, f511807feee7cb29b61bdfa86472c7e9e2e5df94, 08c600b7e1818539ba5efee4cdb06215c245ca78, b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d, c6c484a7d5bff6b929a86d7ed5130f29834c6a0d, f80add1bfb3425100a325b14f19648e75669a954, e3d9c7160d483fc8f9e225aafad8ecbbc43f3151 |
| Linux/Linuxgeneric | 5.4 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parse_dacl() applies the server-provided sub_auth[2] value from the NFS mode SID to cf_mode without masking to 07777. Apply the correct masking, same as in the read path.
Quoted source text, attributed separately from HOL analysis.