Threats tagged 'ghsa-7vf5-5xh7-53fm'

CVE-2026-98173 is a use-after-free vulnerability in the Linux kernel's SMB client implementation, specifically in the cifs_try_adding_channels() function. The flaw arises from improper handling of interface list pointers during concurrent interface refreshes, leading to dereferencing freed memory. This vulnerability has a high severity score and can impact confidentiality, integrity, and availability of the system. A fix has been implemented to prevent use of unreferenced list pointers by rescanning the interface list under lock and managing references correctly.