CVE Database›Document archive›CVE-2026-64016

CVE-2026-64016

kernel: ksmbd: fix durable reconnect error path file lifetime

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 13, 2026

Description

A flaw was found in the Linux kernel's ksmbd component, which handles file sharing. When a durable network connection is re-established, an error in managing the lifetime of file objects can occur. This can lead to a situation where a file object is released from memory while still being referenced, creating a use-after-free vulnerability. An attacker could potentially exploit this to cause the system to crash (denial of service) or, in more severe cases, execute unauthorized code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference