A privilege escalation vulnerability in the Linux kernel SMB client could allow local users to achieve high confidentiality, integrity, and availability impacts.

This is an improper permission validation flaw within the SMB client subsystem, specifically affecting the cifs_setattr_nounix() function when handling ownership updates. An attacker requires local access and low privileges to interact with the vulnerable component.

A successful exploit of this vulnerability could allow a malicious local user to bypass intended access controls and manipulate file ownership improperly on mounted shares. This compromises the confidentiality, integrity, and availability of sensitive system data and resources. The assigned CVSS score of 7.8 reflects the high severity of the potential impact on affected systems.

Immediate Action: Update the Linux kernel to version 7.1.4 or later, or apply the official fix commits provided by the vendor.

Proactive Monitoring: Monitor local system logs for unauthorized file ownership changes, unexpected privilege escalations, and anomalous SMB mount options.

Compensating Controls: Restrict local shell access to trusted users only and enforce strict principle-of-least-privilege permissions on all sensitive file systems and network shares.

Public Exploit Available: No - As of Jul 25, 2026, there is no confirmed public exploit in the available data.

Given the high severity score and the potential for full system compromise, administrators should prioritize updating the Linux kernel as soon as possible. Applying the vendor patch ensures that ownership and group modifications are correctly validated when utilizing SMB3 POSIX Extensions.