Threats tagged 'ghsa-29wc-2986-775f'

CVE-2026-89788 is a critical use-after-free vulnerability in the Linux kernel's ksmbd component, specifically in the smb2_tree_connect() function. The flaw arises when a new tree connection is published but concurrently removed due to a session logoff, leading to use of a freed object. This can cause kernel memory corruption and potentially allow an attacker to execute arbitrary code or cause a denial of service.