ksmbd: Do not skip lock checks for single-byte ranges
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges check_lock_range() uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. The start == end shortcut therefore skips mandatory byte-range lock checks for one-byte reads, writes, copychunk operations and one-byte truncate ranges. A conflicting lock covering that byte is not checked and the operation is allowed to proceed. Remove the shortcut. The truncate size == inode->i_size case is already handled by only calling check_lock_range() when the new size differs from the current file size.
CVE-2026-90176
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-90176
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "52fcbb92e0d3acfd1448b2a43b6595d540da5295",
"lessThan": "a89cc145832e81c32199d4ca2e1ea8bd51ed601d",
"versionType": "git"
},
{
"status": "affected",
"version": "da29cd197246c85c0473259f1cad897d9d28faea",
"lessThan": "993e0158331d37c04da18efe551b5e1e35fb3078",
"versionType": "git"
},
{
"status": "affected",
"version": "a6f4cfa3783804336491e0edcb250c25f9b59d33",
"lessThan": "f751d6e39d4c937c45f8fedc66699aa7d2d52288",
"versionType": "git"
},
{
"status": "affected",
"version": "571204e4758a528fbd67330bd4b0dfbdafb33dd8",
"lessThan": "84c2d8e807ac489f5c91769293fb15dfdae8bae8",
"versionType": "git"
},
{
"status": "affected",
"version": "5d510ac31626ed157d2182149559430350cf2104",
"lessThan": "07a9e289ff7edcc004f58952405f8a65c4e37512",
"versionType": "git"
},
{
"status": "affected",
"version": "5d510ac31626ed157d2182149559430350cf2104",
"lessThan": "d40c24634fe077a0dc91fd11fccf44ce12b454d5",
"versionType": "git"
},
{
"status": "affected",
"version": "6.1.160",
"lessThan": "6.1.188",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.120",
"lessThan": "6.6.157",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.12.64",
"lessThan": "6.12.110",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.18.3",
"lessThan": "6.18.52",
"versionType": "semver"
}
],
"programFiles": [
"fs/smb/server/vfs.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.110",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.52",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.6",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/smb/server/vfs.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-90176
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #36559 · Revision 1
- Added to Heist Feed
- Publisher date