THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64016 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes the same ksmbd_file into the session volatile-id table. If smb2_open() then takes

[NVD] CVE-2026-64016 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix durable reconnect error path file lifetime After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes the same ksmbd_file into the session volatile-id table. If smb2_open() then takes

lownvdPublished 2026-07-19

CVE-2026-64016 CVSS: 9.8 CRITICAL Published: 2026-07-19T16:17:41.577

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix durable reconnect error path file lifetime

After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes the same ksmbd_file into the session volatile-id table. If smb2_open() then takes a later error path, cleanup first calls ksmbd_fd_p

Indicators of compromise

CVE-2026-64016cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64016