Null Pointer Dereference Vulnerability in Linux Kernel's ksmbd Component

CVE-2026-64141

What is CVE-2026-64141?

A vulnerability in the ksmbd component of the Linux kernel allows for a null pointer dereference during session teardown handling, leading to potential system crashes. Specifically, the issue arises when a stale operation information structure remains linked during session logoff and a subsequent connection attempt with the same ClientGuid is made. If a new SMB2 CREATE request is made with a lease context on a different inode, the kernel may panic due to an attempt to dereference a null connection pointer. Proper handling in concurrent session checks is crucial to mitigate this issue.

References