CVE-2026-89788

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the smb2 tree connect() function within the ksmbd module. The ksmbd tree conn connect() function publishes a new tree connection in sess->tree conns with a single reference. Because the handler continues to initialize the object after this publication, a concurrent session logoff can erase the connection and drop the reference, leading to the object being freed while the handler is still using it. This can result in a slab-use-after-free, a condition where the system attempts to access memory that has already been marked as free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.