CVE-2026-90162

A flaw was found in ksmbd, a kernel module for SMB3 protocol support in the Linux kernel. A race condition exists in the smb2_lock() function, where a lock object can be freed while still being referenced, known as a Use-After-Free, and then freed again, known as a Double-Free. This occurs when granted locks are prematurely published, allowing a concurrent unlock request to free the object before a rollback operation completes. This vulnerability could lead to system instability, a denial of service, or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.