CVE-2026-64392

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ksmbd: use opener credentials for delete-on-close<br /> <br /> Delete-on-close can be completed by deferred or durable handle teardown,<br /> where no request work is available. Both the base-file unlink and the ADS<br /> xattr removal consequently run with the ksmbd worker credentials and can<br /> bypass filesystem permission checks.<br /> <br /> Run both operations with the credentials captured in struct file when the<br /> handle was opened. This preserves the authenticated user&amp;#39;s fsuid, fsgid,<br /> supplementary groups and capability restrictions at final close.