CVE-2026-31477

kernel: ksmbd: fix memory leaks and NULL deref in smb2_lock()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 22, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd in the Linux kernel. Error handling issues within the smb2_lock() function can lead to memory leaks. Additionally, an allocation failure in smb_flock_init() can result in a NULL pointer dereference, causing the kernel to crash. This vulnerability could allow a local attacker to cause a Denial of Service (DoS) by triggering these error conditions.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference