CVE-2026-53198

In the Linux kernel ksmbd, CVE-2026-53198 describes a use-after-free in a deferred file_lock tied to SMB2_CANCEL handling. A deferred byte-range lock registers async work via setup_async_work() with a cancel_fn and cancel_argv[0] pointing at the file_lock. If the SMB2_CANCEL path frees the file_l...

EUVD-2026-39289

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL A deferred byte-range lock an SMB2LOCK that blocks registers an async work on conn-asyncrequests via setupasyncwork, with cancelfn = smb2removeblockedlock and...