CVE-2026-53010
published 2026-06-24CVE-2026-53010: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to…
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.43%
35.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in smb2_open during durable reconnect
In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference
to the durable file descriptor early during the durable reconnect
process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails)
or a scavenger accesses the file, it leads to a use-after-free when
accessing fp properties (eg fp->create_time).
Move the single put to the end of the function below err_out2 so fp
stays valid until smb2_open returns.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 6.6.32 < 6.7 | 6.7 |
| linux | linux | >= c8efcc786146a951091588e5fa7e3c754850cb3c < ce2e164c1c51c3f7813b80f8c926836e896bcbb3 | ce2e164c1c51c3f7813b80f8c926836e896bcbb3 |
| linux | linux | >= c8efcc786146a951091588e5fa7e3c754850cb3c < 97a0cd55283b4e63fd92804da91c8d9896adcad9 | 97a0cd55283b4e63fd92804da91c8d9896adcad9 |
| linux | linux | >= c8efcc786146a951091588e5fa7e3c754850cb3c < 1baff47b81f94f9231c91236aa511420d0e266b9 | 1baff47b81f94f9231c91236aa511420d0e266b9 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.18.32/7.0.9 ksmbd below create_time use after free (WID-SEC-2026-2077)
vuldb·2026-06-27
CVE-2026-53010 [CRITICAL] Linux Kernel up to 6.18.32/7.0.9 ksmbd below create_time use after free (WID-SEC-2026-2077)
A vulnerability classified as critical has been found in Linux Kernel up to 6.18.32/7.0.9. Affected by this issue is the function below of the component ksmbd. Performing a manipulation of the argument create_time results in use after free.
This vulnerability is reported as CVE-2026-53010. The attacker must have access to the local network to execute the attack. No exploit exists.
It is recommended to upgrade the affected component.
GHSA
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the refer
ghsa_unreviewed·2026-06-24
CVE-2026-53010 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_open during durable reconnect In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the refer
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in smb2_open during durable reconnect
In smb2_open, the call to ksmbd_put_durable_fd(fp) drops the reference
to the durable file descriptor early during the durable reconnect
process. If an error occurs subsequently (eg, ksmbd_iov_pin_rsp fails)
or a scavenger accesses the file, it leads to a use-after-free when
accessing fp properties (eg fp->create_time).
Move the single put to the end of the function below err_out2 so fp
stays valid until smb2_open returns.
Red Hat
kernel: ksmbd: fix use-after-free in smb2_open during durable reconnect
vendor_redhat·2026-06-24
CVE-2026-53010 CWE-911 kernel: ksmbd: fix use-after-free in smb2_open during durable reconnect
kernel: ksmbd: fix use-after-free in smb2_open during durable reconnect
A flaw was found in the Linux kernel's ksmbd component. During a durable reconnect process in the smb2_open function, a reference to a durable file descriptor is prematurely dropped. This can lead to a use-after-free vulnerability, potentially resulting in system instability or a denial of service (DoS).
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Package: kernel (Red Hat Enterprise Linux 7) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Not affected
Package: kernel (Red Hat Enterprise Linux 8) - Not affected
Package: kernel-rt (Red Hat Enterprise Linux 8) - Not affected
Package: kernel (Red Hat Enterprise Linux 9) -
No detection rules found.
No public exploits indexed.
2026-06-24
Published