CVE-2026-52911

kernel: ksmbd: scope conn->binding slowpath to bound sessions only

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 21, 2026

Updated · October 20, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to gain unauthorized access to session information or resources by exploiting an improper scope in the session binding mechanism. This could potentially compromise the integrity or confidentiality of data within affected sessions.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-488 · Exposure of Data Element to Wrong Session