High (7.1) in linux linux kernel. EPSS 51% chance of exploitation in the next 30 days.
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate mech token in session setup
If client send invalid mech token in session setup request, ksmbd
validate and make the error if it is invalid.
Severity
CVSS 3.1
7.1 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
EPSS
51% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)