CVE Explorer

CVE-2026-52911

In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn->binding slowpath to bound sessions only When the binding SESSION_SETUP sets conn->binding = true, the flag stays set after the call so that the global session lookup in ksmbd_session_lookup_all() can find the session, which was not added to conn->sessions. Because the flag is connection-wide, the global lookup path will also resolve any other session by id if asked. Tighten the global lookup so that the ret

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:629e1430612d458cd9cdbda771489d6dc7de8efa71c6953f2e5dfbb80c398806

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/mgmt/user_session.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e74c00c6af428a39e564cdc5bd3a3648c6d8de87","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"1ff46c9915c1cbf454db58a8cb87f7cac818e6a6","status":"affected","version":"f5a544e3bab7…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/mgmt/user_session.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"}…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/1e2bec062c5c9ec282636715166056d0998d746d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/1ff46c9915c1cbf454db58a8cb87f7cac818e6a6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/2cc8a4db633b10715450b291c1343859a4b2c509"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/974c1c224e85549dc3459f3bb2255bbbdd2b9372"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/b0da97c034b6107d14e537e212d4ce8b22109a58"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/e3a93ce6e25757b8f375e38b8f91e1d9da4edc1a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/e74c00c6af428a39e564cdc5bd3a3648c6d8de87"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:d341dcb8a63a767a6503c484727a7585a55f35dc2cc2523d8b344bf32a574635 · sha256:6452ea08b3c7cc33… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer