CVE-2026-52996

kernel: ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability occurs when handling durable v2 open requests where a ClientGUID mismatch happens. An attacker can repeatedly send requests that trigger this mismatch, leading to a resource leak by preventing file descriptor references from being properly released. This can result in a denial of service (DoS) due to the exhaustion of system resources.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime