HarborGuard / CVE
Back to search
HIGHCVE-2026-23226Published Modified CNA Linux

CVE-2026-23226: ksmbd: add chann_lock to protect ksmbd_chann_list xarray

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free in multi-channel sessions (between lookup_chann_list() and ksmbd_chann_del). Adds rw_semaphore chann_lock to struct ksmbd_session and protects all xa_load/xa_store/xa_erase accesses.

Metrics

CVSS v3.1
8.8
Severity
HIGH
Fixed in
0
Affected Products
2

Fix available

036ef605c0395b94b826a8c8d6f2697071173de6e4c2ca31608521895dd742a43beca4b4d297623454f3a06cc57976cafa8c6f716646be6c79a99e4855.166.26.36.12.776.18.116.19.17.0e4a8a96a93d08570e0405cfd989a8a07e5b6ff33
Affected packages
  • Linux / Linux
    < 4c2ca31608521895dd742a43beca4b4d29762345 (from 1d9c4172110e645b383ff13eee759728d74f1a5d) · < e4a8a96a93d08570e0405cfd989a8a07e5b6ff33 (from 1d9c4172110e645b383ff13eee759728d74f1a5d) · < 36ef605c0395b94b826a8c8d6f2697071173de6e (from 1d9c4172110e645b383ff13eee759728d74f1a5d) · < 4f3a06cc57976cafa8c6f716646be6c79a99e485 (from 1d9c4172110e645b383ff13eee759728d74f1a5d) · b1caecbf34b8c8260d851ec4efde71f3694460b7 · 91bbf9cb2387a0d76322e9a343bc6bc160f66b3f
  • Linux / Linux
    6.3
    Fixed in 0, 6.12.77, 6.18.11, 6.19.1, 7.0
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References