PT-2026-30122 · Linux · Linux Kernel

Published 2026-04-03 · Updated 2026-04-14 · CVE-2026-23427

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc3+

Description The Linux kernel contained a use-after-free flaw within the ksmbd component, specifically in the handling of durable v2 replay operations involving active file handles. The parse durable handle context() function unconditionally assigned a connection pointer, leading to a scenario where a stale connection was dereferenced after being freed by ksmbd close fd(). This condition was triggered during the replay of durable operations, potentially leading to system instability or other undefined behavior.

Recommendations Update to Linux kernel version 7.0.0-rc3+ or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23427

Affected Products

Linux Kernel

References · 15

• https://osv.dev/vulnerability/BELL-CVE-2026-23427 · Vendor Advisory
• https://git.kernel.org/stable/c/a5828c14a9e3d5eeed0bcc0a58f0f3fbca0cdcb2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23427 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23427 · Security Note
• https://git.kernel.org/stable/c/568a25fd7bcdfb2790f7d42aa2a440dca4435c96 · Patch
• https://git.kernel.org/stable/c/9b0792c3eacf01e67f356d6ef9707b0ae5022419 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23427 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23427 · Vendor Advisory
• https://git.kernel.org/stable/c/b425e4d0eb321a1116ddbf39636333181675d8f4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23427 · Vendor Advisory
• https://git.kernel.org/stable/c/b0158d9d6f4ec5941e49a0b812735db2844f9975 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23427 · Vendor Advisory
• https://git.kernel.org/linus/b425e4d0eb321a1116ddbf39636333181675d8f4 · Note
• https://twitter.com/CVEnew/status/2040111906988724345 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-23427 · Note