CVE-2026-45924

kernel: ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability occurs because ksmbd_vfs_kern_path_end_removing() is not called on certain error paths, leading to unbalanced inode locks and references. This can result in potential deadlocks and unbalanced locks, which may cause system instability or a Denial of Service (DoS) condition.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime