Detections
Analytics

Chainguard: linux-qemu-melange: security update to 6.18.49-r2

high Tenable Cloud Security Plugin ID 472552

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent path traversal bypass
 by restricting caseless retry ksmbd_vfs_path_lookup() enforces LOOKUP_BENEATH to restrict path resolution
 within the share root. When a crafted path attempts to escape the share boundary using parent-directory
 components ('..'), vfs_path_parent_lookup() detects this and immediately fails, returning -EXDEV. However,
 a bug exists in __ksmbd_vfs_kern_path() under caseless mode. The function fails to intercept the -EXDEV
 error and erroneously falls through to the caseless retry logic, which is intended only for genuinely
 missing files. During this retry process, the path is reconstructed, leading to an unintended
 LOOKUP_BENEATH bypass that allows write-capable users to create zero-length files or directories outside
 the exported share. Fix this by ensuring that the execution only proceeds to the caseless lookup retry
 when the error is specifically -ENOENT. Any other errors, such as -EXDEV from a path traversal attempt,
 must be returned immediately. (CVE-2026-64400)

Solution

Update the linux-qemu-melange library and its related packages to version 6.18.49-r2 or later.

Plugin Details

Severity: High

ID: 472552

Version: Revision 1.1

Type: Local

Published: 10/3/2026

Updated: 10/3/2026

Risk Information

VPR

Risk Factor: Low

Score: 3.9

Percentile: 52.72

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C

CVSS Score Source: CVE-2026-64400

CVSS v3

Risk Factor: High

Base Score: 8.6

Temporal Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/25/2026

Reference Information

CVE: CVE-2026-64400