CVE-2026-64142

kernel: ksmbd: close durable scavenger races against m_fp_list lookups

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ksmbd component. Two race conditions in the ksmbd_durable_scavenger() function can lead to list corruption and a Use-After-Free (UAF) vulnerability. A remote attacker could potentially exploit these race conditions during durable handle scavenging and lookup operations. This could result in system instability, denial of service, or potentially arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition