CVE-2026-23428

kernel: ksmbd: fix use-after-free of share_conf in compound request

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 3, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs during the processing of Server Message Block version 2 (SMB2) compound requests. An attacker could exploit this by sending a specially crafted sequence of SMB2 commands, causing the system to attempt to access memory that has already been freed. This can lead to a system crash, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference