Race Condition Vulnerability in Linux Kernel's ksmbd Component

CVE-2026-64142

What is CVE-2026-64142?

A critical race condition vulnerability exists in the ksmbd component of the Linux kernel, specifically within the durable scavenger function. This flaw can lead to list corruption and use-after-free (UAF) errors, which occur due to improper management of file pointer nodes during simultaneous access by multiple handlers. As a result, the system may mistakenly allow access to expired file handles that should have been cleared, potentially leading to system instability and security concerns. The vulnerability stems from the mishandling of reference counts and the reuse of linked list nodes during the scavenging process, necessitating an urgent update to eliminate these risks.

References