CVE-2026-64140

kernel: ksmbd: fix null pointer dereference in proc_show_files()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ksmbd module. A local user, or a remote authenticated user, could trigger a null pointer dereference by reading the /proc/fs/ksmbd/files entry after an SMB2 client with a durable handle logs off. This vulnerability can lead to a kernel panic, resulting in a Denial of Service (DoS) for the system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference