CVE-2026-90176
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ksmbd: Do not skip lock checks for single-byte ranges
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges check_lock_range() uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. The start == end shortcut therefore skips mandatory byte-range lock checks for one-byte reads, writes, copychunk operations and one-byte truncate ranges. A conflicting lock covering that byte is not checked and the operation is allowed to proceed. Remove the shortcut. The truncate size == inode->i_size case is already handled by only calling check_lock_range() when the new size differs from the current file size.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 52fcbb92e0d3acfd1448b2a43b6595d540da5295 | affected | git | a89cc145832e81c32199d4ca2e1ea8bd51ed601d | Unavailable | None listed |
| da29cd197246c85c0473259f1cad897d9d28faea | affected | git | 993e0158331d37c04da18efe551b5e1e35fb3078 | Unavailable | None listed |
| a6f4cfa3783804336491e0edcb250c25f9b59d33 | affected | git | f751d6e39d4c937c45f8fedc66699aa7d2d52288 | Unavailable | None listed |
| 571204e4758a528fbd67330bd4b0dfbdafb33dd8 | affected | git | 84c2d8e807ac489f5c91769293fb15dfdae8bae8 | Unavailable | None listed |
| 5d510ac31626ed157d2182149559430350cf2104 | affected | git | 07a9e289ff7edcc004f58952405f8a65c4e37512 | Unavailable | None listed |
| 5d510ac31626ed157d2182149559430350cf2104 | affected | git | d40c24634fe077a0dc91fd11fccf44ce12b454d5 | Unavailable | None listed |
| 6.1.160 | affected | semver | 6.1.188 | Unavailable | None listed |
| 6.6.120 | affected | semver | 6.6.157 | Unavailable | None listed |
| 6.12.64 | affected | semver | 6.12.110 | Unavailable | None listed |
| 6.18.3 | affected | semver | 6.18.52 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.19 | Unavailable | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.157 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.110 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.52 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.6 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |