CVE-2026-74522

A flaw was found in ksmbd, a component of the Linux kernel. This use-after-free vulnerability occurs when a ksmbd file object is prematurely freed while another session still holds a reference to it. This can lead to the system attempting to access freed memory, potentially causing a system crash and resulting in a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires an established SMB session and primarily results in a kernel crash that disrupts service availability, without directly compromising data confidentiality or system integrity. The affected in-kernel SMB server, ksmbd, is not included or enabled in supported Red Hat Enterprise Linux distributions. Consequently, standard Red Hat kernel deployments are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.