CVE-2026-53010
kernel: ksmbd: fix use-after-free in smb2_open during durable reconnect
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ksmbd component. During a durable reconnect process in the smb2_open function, a reference to a durable file descriptor is prematurely dropped. This can lead to a use-after-free vulnerability, potentially resulting in system instability or a denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count