CVE-2026-64390 ksmbd: track the connection owning a byte-range lock

🗓️ 25 Jul 2026 08:50:37Reported by GoogleType

osv🔗 osv.dev👁 6 Views

Fix ksmbd by tracking the owning connection of byte-range locks to avoid use-after-free during unlock, rollback, and close.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-64390	25 Jul 202608:50	–	cve
Cvelist	CVE-2026-64390 ksmbd: track the connection owning a byte-range lock	25 Jul 202608:50	–	cvelist
Debian CVE	CVE-2026-64390	25 Jul 202608:50	–	debiancve
EUVD	EUVD-2026-48934	25 Jul 202608:50	–	euvd
NVD	CVE-2026-64390	25 Jul 202610:17	–	nvd
OSV	DEBIAN-CVE-2026-64390	25 Jul 202610:17	–	osv
OSV	UBUNTU-CVE-2026-64390	27 Jul 202600:00	–	osv
Positive Technologies	PT-2026-64611	25 Jul 202600:00	–	ptsecurity
SUSE CVE	SUSE CVE-2026-64390	25 Jul 202616:00	–	susecve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-64390	25 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/22d38cf75b556c20b039743bdf3654d535b858be
git	www.git.kernel.org/stable/c/427faaa52b0b399940c1a88065a5c310d10dad15
git	www.git.kernel.org/stable/c/5fecc15a30cb9ebd310f7b52c1ab607edcea78f6
git	www.git.kernel.org/stable/c/66eb3643164e5e1029907793926c132f8b5c6148
git	www.git.kernel.org/stable/c/c1016dd1d8b2bcd1158bbaabe94a31bb7e7431fb
git	www.git.kernel.org/stable/c/ea5c9bf99f626a15cc59f645dc895f2b3f01992e
git	www.git.kernel.org/stable/c/fe20d492a69a6f79e637f438072b212e21ed3b78
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64390.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-64390
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

28 Jul 2026 04:02Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.18.8

EPSS0.00467