CVE-2026-64397

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the ksmbd module, the smb2 query dir() function stores a pointer to stack-allocated private data within the ksmbd file readdir data. When concurrent QUERY DIRECTORY requests use the same file handle, this pointer can be overwritten while an iterate dir() callback is still active, leading to a stack use-after-free. A use-after-free is a condition where a program continues to use a pointer after the memory it points to has been freed or reallocated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.