A vulnerability in the Linux kernel's ksmbd component involves improper handling of connection references for session channels. The flaw allows a connection to be freed while still being accessed by another session reference holder, potentially leading to use-after-free conditions during SMB3.1.1 binding or procfs reads. The issue is addressed by holding a connection reference for each session channel until the session is fully destroyed.