Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53271

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers smb2_oplock_break_noti() and smb2_lease_break_noti() read opinfo->conn into a local with neither READ_ONCE() nor a NULL check. Both run from oplock_break() after opinfo_get_list() has dropped ci->m_lock, so a concurrent SMB2 LOGOFF (session_fd_check()) can set op->conn = NULL under ci->m_lock within that window. ksmbd_conn_r_count_inc(conn) then writes thr
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1c483cac817d0e705b4901755c40508ad210bd0028a4f1f8aa5e167ad40c9058
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/oplock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"945a86b21b40fb17183f5b27461baa6f03e2467f","status":"affected","version":"8df4bcdb0a4232192b2445256c39b787d58ef14d","versionType":"git"},{"lessThan":"1ff58dcfcab434ebb51649da33774fbb8e1f7b67","status":"affected","version":"c8efcc786146a951091588e5fa7e3c754850cb3c","versionType":"git"},{"lessThan":"e735dbd489e3ea02be78dba991056fe1138be51e","status":"affected","version":"c8efcc786146a951091588e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/oplock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/oplock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"945a86b21b40fb17183f5b27461baa6f03e2467f","status":"affected","version":"8df4bcdb0a4232192b2445256c39b787d58ef14d","versionType":"git"},{"lessThan":"1ff58dcfcab434ebb51649da33774fbb8e1f7b67","status":"affected","version":"c8efcc786146a951091588e5fa7e3c754850cb3c","versionType":"git"},{"lessThan":"e735dbd489e3ea02be78dba991056fe1138be51e","status":"affected","version":"c8efcc786146a951091588e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/oplock.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.94","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.36","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/1ff58dcfcab434ebb51649da33774fbb8e1f7b67"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/75e33deda658c1ab3a9336cbdb1436536f9b3660"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/945a86b21b40fb17183f5b27461baa6f03e2467f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b003086d76968298f22e7cf62239833b5a3a06b1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/e735dbd489e3ea02be78dba991056fe1138be51e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:0188302a36f6ea0cd2bc411a05b38d5d9a00c06d190af7cec2cdeeb3fd146a7d · sha256:2074baac51df022c… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer