CVE-2026-43379
kernel: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 8, 2026
Updated · October 20, 2026
Description
A flaw was found in ksmbd, a component of the Linux kernel. A race condition exists where a pointer to opinfo is accessed after its associated memory may have been freed by a concurrent operation. This use-after-free vulnerability can lead to memory corruption, potentially causing system instability or a denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference