PT-2026-51904 · Linux · Linux
Published
2026-06-24
·
Updated
2026-06-24
·
CVE-2026-53010
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in smb2 open during durable reconnect
In smb2 open, the call to ksmbd put durable fd(fp) drops the reference
to the durable file descriptor early during the durable reconnect
process. If an error occurs subsequently (eg, ksmbd iov pin rsp fails)
or a scavenger accesses the file, it leads to a use-after-free when
accessing fp properties (eg fp->create time).
Move the single put to the end of the function below err out2 so fp
stays valid until smb2 open returns.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux