CVE-2024-26592

CriticalCVSS 9.8

Published: 22/02/2024(UTC)Updated: 04/08/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.83%

54th percentile - higher than 54% of all known CVEs

Summary

In the Linux kernel, a use-after-free vulnerability in the ksmbd_tcp_new_connection() function of the ksmbd module has been fixed. The issue is caused by a race between handling a new TCP connection and its disconnection, leading to a use-after-free on the tcp_transport structure.

Risk Assessment

The vulnerability could lead to system crashes or potentially arbitrary code execution by an attacker who can initiate a TCP connection to the ksmbd service. However, this requires network access to the SMB server.

Recommendation

Update the Linux kernel to a version containing the fix. Also restrict access to the ksmbd service to trusted networks only.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() The race is between the handling of a new TCP connection and its disconnection. It leads to UAF on `struct tcp_transport` in ksmbd_tcp_new_connection() function.