CVE-2026-53046

A flaw was found in the Linux kernel's ksmbd component. This vulnerability, a use-after-free, occurs when the ksmbd component incorrectly handles asynchronous (async) cryptographic operations, specifically with hardware crypto engines like the Qualcomm Crypto Engine (QCE). When the QCE returns an in-progress status, ksmbd prematurely frees memory while hardware operations are still active. This can lead to a NULL pointer crash, resulting in a Denial of Service (DoS) for the system.