CVE-2026-72492

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ksmbd module. The function same client has lease() returns an opinfo pointer from ci->m op list after releasing ci->m lock without acquiring a reference. Subsequently, the smb grant oplock() function dereferences this pointer within copy lease() and during the check of breaking cnt. If a concurrent close operation removes the old lease from ci->m op list and drops the final reference before the pointer is used, it results in a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.