CVE-2026-64141

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null pointer dereference exists in the ksmbd module. During durable-handle session teardown, the session fd check() function sets op->conn to NULL for matching opinfo entries, but these entries remain linked in the lease table list. If a new session is negotiated on the same TCP connection using the same ClientGuid and a SMB2 CREATE request is issued with a lease context on a different inode, the find same lease key() function accesses the stale opinfo and calls compare guid key(). This function attempts to dereference opinfo->conn->ClientGUID, leading to a kernel panic because the conn pointer is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.