SB20260928380 - Use-after-free in Linux kernel smb client

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-97562)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to compromise confidentiality, integrity, and availability.

The vulnerability exists due to use-after-free in the SMB client DFS superblock lookup callback when handling DFS automounts during concurrent expiry. A remote attacker can trigger concurrent DFS automount expiry while the superblock is in use to compromise confidentiality, integrity, and availability.

User interaction is required.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5b01a8c0209690db75341528ec53fd87e0ac1460
• https://git.kernel.org/stable/c/a6b6561522212af852c9ad8a7dca8d59ef2c7377
• https://git.kernel.org/stable/c/d806d5a85dcbe2a0f181b2f0f9f61ddfbefa1818
• https://git.kernel.org/stable/c/ea43a15cea36dc5ddd832be5bddeac7dd804cbcf