CVE-2026-64016
kernel: ksmbd: fix durable reconnect error path file lifetime
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 13, 2026
Description
A flaw was found in the Linux kernel's ksmbd component, which handles file sharing. When a durable network connection is re-established, an error in managing the lifetime of file objects can occur. This can lead to a situation where a file object is released from memory while still being referenced, creating a use-after-free vulnerability. An attacker could potentially exploit this to cause the system to crash (denial of service) or, in more severe cases, execute unauthorized code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference