REDHAT-BUG-2507135: Medium severity Linux Kernel vulnerability

Published Jul 25, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parsedacl() applies the server-provided subauth[2] value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking, same as in the read path.

Affected Software

1 affected component

Linux Kernel

Event History

Jul 25, 2026

Data Sourced

via Red Hat·10:06 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which systems are exposed to this issue?

Systems using the Linux kernel SMB client with modefromsid active are exposed. The affected path processes an NFS mode SID supplied by the SMB server.

What does an attacker need to exploit it?

An attacker would need to control, or be able to provide malicious metadata through, the SMB server from which the client receives the NFS mode SID. The issue arises when the server-provided sub_auth[2] mode value is applied without being limited to 07777.

Is the default configuration affected?

The provided information identifies modefromsid as the condition for exposure, but does not state whether modefromsid is enabled by default.

What is the remediation?

Apply the resolved Linux kernel fix that masks the server-provided mode value to 07777 in modefromsid, matching the existing read-path behavior.

REDHAT-BUG-2507135: Medium severity Linux Kernel vulnerability

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

Is the default configuration affected?

What is the remediation?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What does an attacker need to exploit it?

Is the default configuration affected?

What is the remediation?