CVE-2026-43378: smb: server: fix use-after-free in smb2_open()
In the Linux kernel, the following vulnerability has been resolved:
smb: server: fix use-after-free in smb2open()
The opinfo pointer obtained via rcudereference(fp->fopinfo) is dereferenced after rcureadunlock(), creating a use-after-free window.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
The CVSS vector indicates the issue is exploitable over the network with low attack complexity. It requires no privileges and no user interaction.
What is the potential impact of successful exploitation?
The vulnerability is rated critical with high confidentiality, integrity, and availability impact in the provided CVSS vector. It could therefore affect data confidentiality, system integrity, and service availability.
What systems should be prioritized for remediation?
Prioritize Linux systems running the Linux kernel SMB server functionality, particularly those reachable by untrusted network clients. The supplied data does not identify affected or fixed kernel version numbers.
What should be done if the system cannot be patched immediately?
The available data supports reducing exposure by limiting untrusted network access to the SMB server, since exploitation is network-based and does not require authentication. Apply the fixes referenced by the supplied stable kernel commits when possible.