Get real-time updates on Telegram
CVE-2026-90153: Linux 6.0
CVE-2026-90153. CVSS 3.1 base score 8.1 (HIGH, Source advisory). EPSS 0.00478 (percentile 0.3985), scored 17-Oct-2026.
Affected technology
Linux · 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to before a2051ffe452afad52f580b85a3fd8851933b1e7c, 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to before a29f57a14c939586d84d7fd6a029bd1fd170098f, 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to before a4a307d149327dad5fb25187e1b03cebd1b04de6, 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to before 8e4f75e979c1d9a51b0a48ac33d0cfd5f039ec67, 8f0541186e9ad1b62accc9519cc2b7a7240272a7 to before 79decd88dd3f0d42e7fb0689b1a7853bfa302459, cb69d4d6f709f87c94afa28ae64c501576692171, 6e8f4abf584253cbaa596ea4ad13110cf61cd4c9, 8e33102309bd6839b2e2e158f93a7b378cb4655d, 5.15.62 to before 5.16, 5.18.18 to before 5.19, 5.19.2 to before 5.20
Linux
Linux · 6.0
Linux
Component: Not specified by the source
File: fs/smb/server/smbacl.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.1/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 32.5 /100 (P4)
- CVSS 3.1
- 8.1 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Source advisory
- EPSS
- 0.00478 · percentile 0.3985 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-90153.html