PT-2026-51904 · Linux · Linux

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-53010

NVD

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in smb2 open during durable reconnect

In smb2 open, the call to ksmbd put durable fd(fp) drops the reference to the durable file descriptor early during the durable reconnect process. If an error occurs subsequently (eg, ksmbd iov pin rsp fails) or a scavenger accesses the file, it leads to a use-after-free when accessing fp properties (eg fp->create time).

Move the single put to the end of the function below err out2 so fp stays valid until smb2 open returns.

Identificadores relacionados

CVE-2026-53010

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/ce2e164c1c51c3f7813b80f8c926836e896bcbb3 · Nota
• https://git.kernel.org/stable/c/97a0cd55283b4e63fd92804da91c8d9896adcad9 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53010 · Nota de Segurança
• https://git.kernel.org/stable/c/1baff47b81f94f9231c91236aa511420d0e266b9 · Nota