CVE-2026-72492

A flaw was found in ksmbd, the in-kernel SMB3 server for Linux. This memory corruption vulnerability, known as a use-after-free, occurs when the system attempts to use memory after it has been released. A remote attacker could trigger this by performing a concurrent close operation during lease...

ksmbd expiresession SMB Data Compromise

The vulnerability of the ksmbdexpiresession function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB Server Message Block networking implementation within the Linux-based ksmbd CIFS/SMB3 server, relates to the reutilization of previously freed memory due to competitive...