CVE-2026-64140

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference exists in the proc show files() function within the ksmbd module. This occurs when an SMB2 client opens a file using a durable v2 handle and then performs an SMB2 SESSION LOGOFF. The session fd check() function sets fp->tcon to NULL, but the file pointer remains registered in global ft.idr until the durable scavenger process runs. If the /proc/fs/ksmbd/files endpoint is read during this interval, the kernel panics because proc show files() attempts to access fp->tcon->id without verifying if fp->tcon is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.