Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-23226

ksmbd: add chann_lock to protect ksmbd_chann_list xarray

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free in multi-channel sessions (between lookup_chann_list() and ksmbd_chann_del). Adds rw_semaphore chann_lock to struct ksmbd_session and protects all xa_load/xa_store/xa_erase accesses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 91bbf9cb2387a0d76322e9a343bc6bc160f66b3f to < c00f3938f7ac52770907768e440cf253af9cbb63affected
  • 1d9c4172110e645b383ff13eee759728d74f1a5d to < 43ad494ac6e940a8eabf25d5bd77bb3bb53b1153affected
  • 1d9c4172110e645b383ff13eee759728d74f1a5d to < 4c2ca31608521895dd742a43beca4b4d29762345affected
  • 1d9c4172110e645b383ff13eee759728d74f1a5d to < e4a8a96a93d08570e0405cfd989a8a07e5b6ff33affected
  • 1d9c4172110e645b383ff13eee759728d74f1a5d to < 36ef605c0395b94b826a8c8d6f2697071173de6eaffected
  • 1d9c4172110e645b383ff13eee759728d74f1a5d to < 4f3a06cc57976cafa8c6f716646be6c79a99e485affected
  • b1caecbf34b8c8260d851ec4efde71f3694460b7affected
  • 853c416710b075153c1e1421e099ffbe5dac68ceaffected
  • 6.1.29 to < 6.1.191affected
  • 5.15.145 to < 5.16affected
  • 6.2.16 to < 6.3affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.77 to ≤ 6.12.*unaffected
  • 6.18.11 to ≤ 6.18.*unaffected
  • 6.19.1 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References