THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68130 — In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authenticate(), destroy_previous_session() is called using a user pointer resolved from the client-supplied NTLM blob username fie

[NVD] CVE-2026-68130 — In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authenticate(), destroy_previous_session() is called using a user pointer resolved from the client-supplied NTLM blob username fie

mednvdPublished 2026-08-10

CVE-2026-68130 CVSS: None Published: 2026-08-10T13:19:58.337

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: defer destroy_previous_session() until after NTLM authentication

In ntlm_authenticate(), destroy_previous_session() is called using a user pointer resolved from the client-supplied NTLM blob username field before the NTLMv2 response is validated. An authentica

Indicators of compromise

CVE-2026-68130cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68130