IBM Storage Scale SMB protocol stack (inherited ACL handling): Files created or modified over SMB inherit permissions

Impact

Files created or modified over SMB inherit permissions that are wider than intended, so an authenticated user reads data they were never granted. On a mixed-protocol cluster this quietly opens one tenant's directories to another.

Who can reach it

Any authenticated SMB client of a Storage Scale 5.2.3.0 or 5.2.3.1 cluster where directories use inherited ACLs.

What to do

Apply the fix from IBM's bulletin, then audit effective ACLs on every directory that was created or modified through SMB while the affected versions ran - the upgrade corrects behaviour going forward but does not repair permissions already written.

References

Related entries

• CephFS (ceph-fuse client): A tenant with an ordinary unprivileged UID on a node that has a CephFS volume mounted viaCVE-2025-52555 · CephFS (ceph-fuse client)Medium
• PostgreSQL pgcrypto: PGP functions emit recoverable cleartext when OpenSSL disables the cipherCVE-2026-14663 · PostgreSQL pgcrypto (pgp_sym_encrypt / pgp_pub_encrypt family)Medium
• Keycloak: authenticated user can exhaust server memory via unbounded Prometheus metric labelsCVE-2026-16100 · Keycloak (user-event Prometheus metrics)Medium
• open-iscsi iscsiuio (DHCPv6 handling): Integer underflow and out-of-bounds read in iscsiuio's DHCPv6 handlingCVE-2026-18727 · open-iscsi iscsiuio (DHCPv6 handling)Medium
• Grafana: injected timeGroup macro in a SQL query exhausts memory and kills the server processCVE-2026-19475 · Grafana SQL data sources (regex macro parsing, timeGroup injected via WHERE clause)Medium
• lldpd (802.1Q VLAN tag stripping in lldpd_decode): lldpd strips 802.1Q VLAN tags by memmove-ing the frame payload fourCVE-2026-46433 · lldpd (802.1Q VLAN tag stripping in lldpd_decode)Medium