Vulnerability in Linux

CVE-2026-64389

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate NTLMv2 response before updating session key ksmbd_auth_ntlmv2() derives the NTLMv2 session key into sess->sess_key before it verifies the NTLMv2 response…

Affected products

  • Linux — versions e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9, 5.15, 0

References