CVE-2026-68083

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client could exploit a path resolution error, specifically in the `ksmbd_vfs_kern_path_create()` function. This vulnerability allows a client to use ".." components in a path to escape the intended shared directory, potentially leading to unauthorized access to files or directories outside of the configured share.