PT-2026-39039 · Linux · Linux Kernel

CVE-2026-43378 · Published 2026-05-08 · Updated 2026-07-17

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the SMB server component. The opinfo pointer, obtained through the rcu dereference(fp->f opinfo) function, is dereferenced after the rcu read unlock() function is called, creating a window for memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-43378

USN-8490-1

USN-8490-2

USN-8491-1

USN-8492-1

USN-8492-2

USN-8492-3

USN-8492-4

USN-8492-5

USN-8497-1

USN-8498-1

USN-8499-1

USN-8508-1

USN-8545-1

USN-8546-1

Affected Products

Linux Kernel

References · 593

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43378.json · Exploit
• https://ubuntu.com/security/CVE-2026-45916 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45875 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23096 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23394 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45954 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23047 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43241 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-22999 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45886 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43277 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43312 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory