SECUFOCUSNOW
Home›CVE index›CVE-2026-64141
Review reviewHigh

CVE-2026-64141

Linux

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_op_list during durable-handle session teardown and sets op->conn = NULL for every opinfo whose conn matched the closing session's connection. The matching opinfo, however, stays linked in its per-ClientGuid lease_table_list entry's lb->lease_list because destroy_lease_table() only runs on full TCP-connection teardown, not on SESSION_LOGOFF. If the same TCP connection then negotiates a fresh session with the same ClientGuid (Cl...

CVSS
7.5
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.5

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in compare_guid_key() session_fd_check() walks the per-inode m_op_list during durable-handle session teardown and sets op->conn = NULL for every opinfo whose conn matched the closing session's connection. The matching opinfo, however, stays linked in its per-ClientGuid lease_table_list entry's lb->lease_list because destroy_lease_table() only runs on full TCP-connection teardown, not on SESSION_LOGOFF. If the same TCP connection then negotiates a fresh session with the same ClientGuid (Cl...

Affected product and versions

Product
Linux
Affected versions
>= 8df4bcdb0a4232192b2445256c39b787d58ef14d < e43cb36d4d7827710cfcd48e95e29a507f0d87be, >= c8efcc786146a951091588e5fa7e3c754850cb3c < 0836081b394ca074d1b910f2b990ff7b4b4404c7, >= c8efcc786146a951091588e5fa7e3c754850cb3c < cd5c1b75d2f454f625d7dc55bd3ae21d0855f6ad, >= c8efcc786146a951091588e5fa7e3c754850cb3c < af86896ca3239e25a6bd7d352213371265073d38, >= c8efcc786146a951091588e5fa7e3c754850cb3c < 4b83cbc4c15f09b000cc06f033f64b0824b6dc87, >= 6.6.32 < 6.6.142, >= 6.9
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
Not available
CVE-2026-64141 — Linux | SECUFOCUS NOW