CVE Database›Document archive›CVE-2026-53271

CVE-2026-53271

kernel: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · June 26, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. A remote attacker could exploit a NULL-dereference vulnerability in the oplock/lease break notifiers. This occurs because opinfo->conn is read without proper checks, allowing a concurrent Server Message Block (SMB2) LOGOFF to set op->conn to NULL. Successful exploitation leads to a kernel oops, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference