CVE-2026-72381

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. A remote attacker can exploit a race condition by initiating two concurrent SMB2 durable reconnects with the same persistent ID. This can lead to a use-after-free error, where freed memory is accessed, potentially causing system instability or a denial of service.

This vulnerability is rated Moderate rather than Important because exploitation requires concurrent SMB2 durable handle reconnects against an active ksmbd service, presenting a narrow timing window that primarily leads to kernel memory corruption and denial of service. In Red Hat Enterprise Linux, the in-kernel SMB server is not configured or loaded by default, as userspace Samba serves as the standard file sharing solution. Only systems where administrators have explicitly configured and exposed ksmbd to network clients are impacted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.