CVE-2026-64389

ksmbd: validate NTLMv2 response before updating session key

References

Notes


      

Bugs

Status

Branch Status
upstream released (7.2-rc1) [954d196bebb2b50151cb96454c72dc113b2af1ac]
7.2-upstream-stable N/A "Fixed before branching point"
7.1-upstream-stable released (7.1.4) [89ca7756d5566ba636bb9092cdbe57dab095e136]
6.18-upstream-stable released (6.18.40) [b56400364aed5c34d6e1a0b493081290a5328a9c]
6.12-upstream-stable released (6.12.114) [f5d74c186bab26a5d5a025305e67edd0888aa34d]
6.6-upstream-stable released (6.6.160) [a6a951416b55eaf51ea2742f7ba786f240e70137]
6.1-upstream-stable released (6.1.191) [e589e997bddde0a6f45672dd871cba7b3ff28e17]
5.10-upstream-stable N/A "Vulnerable code not present"
sid released (7.1.4-1)
6.12-trixie-security released (6.12.115-1)
6.1-bookworm-security needed
5.10-bullseye-security N/A "Vulnerable code not present"