exploitDog

CVE-2026-43378

Опубликовано: 08 мая 2026

Источник: nvd

CVSS3: 9.8

CVSS3: 7.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

smb: server: fix use-after-free in smb2_open()

The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is dereferenced after rcu_read_unlock(), creating a use-after-free window.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.15 (включая) до 6.1.167 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.130 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.78 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.19 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.9 (исключая)

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00308

Низкий

9.8 Critical

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-43378

CVSS3: 9.8

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is dereferenced after rcu_read_unlock(), creating a use-after-free window.

CVE-2026-43378

redhat

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is dereferenced after rcu_read_unlock(), creating a use-after-free window.

CVE-2026-43378

CVSS3: 9.8

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: s ...

GHSA-8cfc-95hv-9rqj

CVSS3: 7.8

github

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is dereferenced after rcu_read_unlock(), creating a use-after-free window.

EPSS

Процентиль: 23%

0.00308

Низкий

9.8 Critical

CVSS3

7.8 High

CVSS3

Дефекты

CWE-416