CVE Database›Document archive›CVE-2026-64390

CVE-2026-64390

kernel: ksmbd: track the connection owning a byte-range lock

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's ksmbd component, which provides Server Message Block (SMB) protocol support. This vulnerability involves incorrect management of byte-range locks when multiple connections are used with SMB3 multichannel. An attacker could exploit this by sending specially crafted SMB requests, potentially causing memory corruption. This could lead to system instability or a denial of service (DoS), making the system unavailable.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-416 · Use After Free