In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()
opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is being accessed after rcu_read_unlock() has been called. This creates a race condition where the memory could be freed by a concurrent writer between the unlock and the subsequent pointer dereferences (opinfo->is_lease, etc.), leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-nvidia-6.17Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1020-oracle-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.17.0-1019-realtimeUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-generic-6.17Upgrade linux-image-6.17.0-1022-gcpUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.17.0-1020-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1022-azureUpgrade linux-image-gcpUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-realtime-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-6.17.0-42-genericUpgrade linux-image-6.17.0-1032-oemUpgrade linux-image-6.17.0-1022-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-6.17.0-42-generic-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-64k-6.17Upgrade linux-image-azure-6.17 | Aug 13, 2026 | Aug 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub