CVE-2026-23226
Published: Feb 18, 2026
Modified: May 23, 2026
CVSS v3.1
8.8
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free in multi-channel sessions (between lookup_chann_list() and ksmbd_chann_del). Adds rw_semaphore chann_lock to struct ksmbd_session and protects all xa_load/xa_store/xa_erase accesses.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 1d9c4172110e645b383ff13eee759728d74f1a5d - < 4c2ca31608521895dd742a43beca4b4d29762345affected 1d9c4172110e645b383ff13eee759728d74f1a5d - < e4a8a96a93d08570e0405cfd989a8a07e5b6ff33affected 1d9c4172110e645b383ff13eee759728d74f1a5d - < 36ef605c0395b94b826a8c8d6f2697071173de6eaffected 1d9c4172110e645b383ff13eee759728d74f1a5d - < 4f3a06cc57976cafa8c6f716646be6c79a99e485affected b1caecbf34b8c8260d851ec4efde71f3694460b7+5 more versions |
Linux | Linux | affected 6.3unaffected 0 - < 6.3unaffected 6.12.77 - <= 6.12.*unaffected 6.18.11 - <= 6.18.*unaffected 6.19.1 - <= 6.19.*+1 more versions |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now