CVE Database›Document archive›CVE-2026-23427

CVE-2026-23427

kernel: ksmbd: fix use-after-free in durable v2 replay of active file handles

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 3, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd, a component within the Linux kernel that provides server message block (SMB) functionality. This vulnerability, known as a use-after-free, occurs when the system attempts to access memory after it has been released. A remote attacker could exploit this by sending specially crafted SMB durable v2 replay requests. Successful exploitation could lead to a system crash, resulting in a denial of service, or potentially allow for arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference