CVE-2026-72492

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. This memory corruption vulnerability, known as a use-after-free, occurs when the system attempts to use memory after it has been released. A remote attacker could trigger this by performing a concurrent close operation during lease...

The vulnerability of the ksmbdexpiresession() function in the implementation of the SMB (Server Message Block) network protocol within the kernel of the CIFS/SMB3-server ksmbd in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ksmbdexpiresession function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB Server Message Block networking implementation within the Linux-based ksmbd CIFS/SMB3 server, relates to the reutilization of previously freed memory due to competitive...