CVE-2026-89788

CVE-2026-89788 is a slab-use-after-free in the Linux kernel's ksmbd (SMB server) subsystem, specifically in smb2_tree_connect() within fs/smb/server/smb2pdu.c. The root cause is a race condition: when ksmbd_tree_conn_connect() publishes a new tree connection into sess->tree_conns with a single...

UBUNTU-CVE-2026-53271

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo-conn in oplock/lease break notifiers smb2oplockbreaknoti and smb2leasebreaknoti read opinfo-conn into a local with neither READONCE nor a NULL check. Both run from oplockbreak after opinfogetlist h...

CVE-2026-53271

CVE-2026-53271 affects the Linux kernel ksmbd component. The vulnerability is a NULL-deref in oplock/lease break notifiers: smb2_oplock_break_noti() and smb2_lease_break_noti() read opinfo->conn into a local buffer without READ_ONCE and without a NULL check. After opinfo_get_list() drops ci-&g...