CVE-2026-90162 ksmbd: defer publishing granted locks to prevent UAF/double-free race

In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer publishing granted locks to prevent UAF/double-free race In smb2lock, mid-batch granted locks are published to connection-wide conn-locklist and file-wide fp-locklist lists immediately upon vfslockfile success, while...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from ksmbd prematurely releasing authorized locks into conn-locklist and fp-locklist during smb2lock. Concurrent UNLOCK requests may release lock objects before rollback operations, leading to re-use of released locks and...