In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthread_stop(), so the task_struct can be freed before kthread_stop() gets its reference. Create the listener in a stopped state and hold an extra task_struct reference until kthread_stop_put() completes. Also stop and release listeners before freeing their interface records during TCP teardown.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://git.kernel.org/stable/c/40581f10c1e56238b157af5f260b8f9518a0cbc1 Patch
- https://git.kernel.org/stable/c/a506290f59e1c6ce9ac0a13158640bb8fee93471 Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- CwesCWE-362, CWE-416NVD modified 2026-10-28 18:49
- Cpes+2 CPE criteria (now 2)NVD modified 2026-10-28 18:49
- StatusPublished → AnalyzedNVD modified 2026-10-28 18:49
- StatusUndergoing Analysis → PublishedNVD modified 2026-10-19 09:14
- First seenCVSS 7.8NVD modified 2026-10-19 10:18
Affected (CPE criteria) 2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*