CVE-2026-43378
kernel: smb: server: fix use-after-free in smb2_open()
Loading…
Severity
ImportantRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 8, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel. Specifically, within the Server Message Block (SMB) server component, a use-after-free vulnerability exists in the smb2_open() function. This issue arises when an opinfo pointer is accessed after its memory has been deallocated, creating a window for potential memory corruption. An attacker could exploit this to cause a denial of service or potentially execute arbitrary code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference