CVE-2026-23428

🗓️ 03 Apr 2026 16:16:23Reported by [email protected]Type

ksmbd fixes use-after-free of share_conf in compound SMB2 requests by validating tcon state.

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2026-23428	3 Apr 202615:15	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	3 May 202623:59	–	astralinux
Circl	CVE-2026-23428	23 Apr 202623:26	–	circl
CNNVD	Linux kernel 安全漏洞	3 Apr 202600:00	–	cnnvd
CVE	CVE-2026-23428	3 Apr 202615:15	–	cve
Cvelist	CVE-2026-23428 ksmbd: fix use-after-free of share_conf in compound request	3 Apr 202615:15	–	cvelist
Debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian	[SECURITY] [DSA 6243-1] linux security update	1 May 202619:10	–	debian
Debian CVE	CVE-2026-23428	3 Apr 202615:15	–	debiancve

NVD

Node

linux linux_kernelRange5.15.121–5.15.203

linux linux_kernelRange6.1.36–6.1.167

linux linux_kernelRange6.3.10–6.4

linux linux_kernelRange6.4.1–6.6.130

linux linux_kernelRange6.7–6.12.78

linux linux_kernelRange6.13–6.18.20

linux linux_kernelRange6.19–6.19.10

Source	Link
git	www.git.kernel.org/stable/c/806f13752652216db0c309392b4db3e64eeed4f2
git	www.git.kernel.org/stable/c/c33615f995aee80657b9fdfbc4ee7f49c2bd733d
git	www.git.kernel.org/stable/c/a5929c2020ce54e1dcbd1078c0f30b8aaf73c105
git	www.git.kernel.org/stable/c/c742b46a153d3ff95ff0825ab1950c87b9e14470
git	www.git.kernel.org/stable/c/d08417981155883068b7260d9500ca306a03edac
git	www.git.kernel.org/stable/c/eae0dc86f71e6f3294c0cd7ffc05039258d243af
git	www.git.kernel.org/stable/c/7f7468fd2a7554cea91b7d430335a3dbf01dcc09

17 Jun 2026 10:21Current

CVSS 3.17.8 - 9.8

EPSS0.00331