https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:41:42 +0000 https://vulnerability.circl.lu/vuln/cve-2026-53010 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: fix use-after-free in smb2_open during durable reconnect</p> <p>In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference to the durable file descriptor early during the durable reconnect process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails) or a scavenger accesses the file, it leads to a use-after-free when accessing fp properties (eg fp-&gt;create_time).</p> <p>Move the single put to the end of the function below err_out2 so fp stays valid until smb2_open returns.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ksmbd: fix use-after-free in smb2_open during durable reconnect</p> <p>In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference to the durable file descriptor early during the durable reconnect process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails) or a scavenger accesses the file, it leads to a use-after-free when accessing fp properties (eg fp-&gt;create_time).</p> <p>Move the single put to the end of the function below err_out2 so fp stays valid until smb2_open returns.</p> https://vulnerability.circl.lu/vuln/cve-2026-53010