CVE Database›Document archive›CVE-2026-43378

CVE-2026-43378

kernel: smb: server: fix use-after-free in smb2_open()

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel. Specifically, within the Server Message Block (SMB) server component, a use-after-free vulnerability exists in the smb2_open() function. This issue arises when an opinfo pointer is accessed after its memory has been deallocated, creating a window for potential memory corruption. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference