CVE-2026-68381

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. A race condition exists during connection teardown and asynchronous oplock or lease break notifications. This can lead to a use-after-free vulnerability, where a freed connection object is still accessed by a queued worker. This issue could potentially result in memory corruption, leading to system instability or a denial of service.

Red Hat Enterprise Linux is not impacted by this vulnerability because the ksmbd module is unsupported and disabled by default.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.