In the Linux kernel, the following vulnerability has been resolved:

smb: client: mask server-provided mode to 07777 in modefromsid

When modefromsid is active, parse_dacl() applies the server-provided
sub_auth[2] value from the NFS mode SID to cf_mode without masking to
07777. Apply the correct masking, same as in the read path.

https://git.kernel.org/stable/c/08c600b7e1818539ba5efee4cdb06215c245ca78

https://git.kernel.org/stable/c/5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14

https://git.kernel.org/stable/c/b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d

https://git.kernel.org/stable/c/c6c484a7d5bff6b929a86d7ed5130f29834c6a0d

https://git.kernel.org/stable/c/e3d9c7160d483fc8f9e225aafad8ecbbc43f3151

https://git.kernel.org/stable/c/ee2216dbdf0c677e89bb43e03247dba590ed00ef

https://git.kernel.org/stable/c/f511807feee7cb29b61bdfa86472c7e9e2e5df94

https://git.kernel.org/stable/c/f80add1bfb3425100a325b14f19648e75669a954

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["fs/smb/client/cifsacl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"5f6f2241034f189c69d4d0b5f8fe24a0c25b0c14","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"ee2216dbdf0c677e89bb43e03247dba590ed00ef","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"f511807feee7cb29b61bdfa86472c7e9e2e5df94","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"08c600b7e1818539ba5efee4cdb06215c245ca78","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"b84e002e0df26bbc6cbd3ca01b8212601fe0ae7d","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"c6c484a7d5bff6b929a86d7ed5130f29834c6a0d","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"f80add1bfb3425100a325b14f19648e75669a954","versionType":"git","status":"affected"},{"version":"e2f8fbfb8d09c06decde162090fac3ee220aa280","lessThan":"e3d9c7160d483fc8f9e225aafad8ecbbc43f3151","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["fs/smb/client/cifsacl.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.4","status":"affected"},{"version":"0","lessThan":"5.4","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.96","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.39","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.4","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]