CVE-2026-72492

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. This memory corruption vulnerability, known as a use-after-free, occurs when the system attempts to use memory after it has been released. A remote attacker could trigger this by performing a concurrent close operation during lease handling, leading to system instability, information disclosure, or potentially arbitrary code execution.

This vulnerability is rated Moderate for Red Hat Enterprise Linux because the in-kernel SMB service is not enabled by default and requires winning a race condition during concurrent client operations. Typical enterprise installations rely on userspace Samba instead of the ksmbd server module, keeping default environments unaffected. The issue can only affect configurations where ksmbd is explicitly loaded and actively handling network shares.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.