Critical · 9.8 CVE-2026-43378 EUVD-2026-28684GHSA-8cfc-95hv-9rqj

smb: server: fix use-after-free in smb2_open()

Published May 8, 2026 · Updated Aug 5, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.8 Package: linux-aws-6.14 Package: linux-aws-6.17 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-6.8 Package: linux-aws-fips Package: linux-azure Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.8 Package: linux-azure-6.11 Package: linux-azure-6.14 Package: linux-azure-6.17 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-6.8 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.15 Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.14 Package: linux-azure-fde-6.2 Package: linux-azure-fde-6.8 Package: linux-azure-fips Package: linux-azure-nvidia Package: linux-azure-nvidia-6.14 Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.8 Package: linux-gcp-6.11 Package: linux-gcp-6.14 Package: linux-gcp-6.17 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-6.8 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.8 Package: linux-hwe-6.11 Package: linux-hwe-6.14 Package: linux-hwe-6.17 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-6.8 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-6.8 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.11 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lowlatency-hwe-6.8 Package: linux-nvidia Package: linux-nvidia-6.11 Package: linux-nvidia-6.17 Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-6.8 Package: linux-nvidia-lowlatency Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.11 Package: linux-oem-6.14 Package: linux-oem-6.17 Package: linux-oem-6.5 Package: linux-oem-6.8 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.8 Package: linux-oracle-6.14 Package: linux-oracle-6.17 Package: linux-oracle-6.5 Package: linux-oracle-6.8 Package: linux-raspi Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-realtime-6.14 Package: linux-realtime-6.17 Package: linux-realtime-6.8 Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.14 Package: linux-riscv-6.17 Package: linux-riscv-6.5 Package: linux-riscv-6.8 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: server: fix use-after-free in smb2_open()

The opinfo pointer obtained via rcu_dereference(fp->f_opinfo) is
dereferenced after rcu_read_unlock(), creating a use-after-free
window.

Affected products

Vendor	Product	Affected	Fixed
Linux	Linux	5.15	6.1.167

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	6.19.10-1	—
Debian 13	linux	6.12.85-1	—
Debian 12	linux	6.1.170-1	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Nvidia-BlueField 24.04 LTS	linux-bluefield	6.8.0-1026.30	—
Ubuntu Nvidia-BlueField 22.04 LTS	linux-bluefield	5.15.0-1097.99	—
Ubuntu 25.10	linux	6.17.0-40.40	USN-8490-1
Ubuntu 25.10	linux-aws	6.17.0-1019.19	USN-8490-1
Ubuntu 25.10	linux-azure +1	No fix yet	—
Ubuntu 25.10	linux-gcp	6.17.0-1020.22	USN-8490-1
Ubuntu 25.10	linux-oracle	6.17.0-1018.18	USN-8490-1
Ubuntu 25.10	linux-raspi	6.17.0-1021.21	USN-8546-1
Ubuntu 25.10	linux-realtime	6.17.0-1017.19	USN-8490-2
Ubuntu 25.10	linux-riscv	6.17.0-40.40.1	—
Ubuntu 24.04 LTS	linux	6.8.0-134.134	USN-8492-1
Ubuntu 24.04 LTS	linux-aws	6.8.0-1060.63	USN-8492-1
Ubuntu 24.04 LTS	linux-aws-6.17	6.17.0-1019.19~24.04.1	USN-8490-1
Ubuntu 24.04 LTS	linux-azure	6.8.0-1063.71	USN-8606-1
Ubuntu 24.04 LTS	linux-azure-6.17	6.17.0-1021.21~24.04.1	USN-8604-1
Ubuntu 24.04 LTS	linux-azure-fde	6.8.0-1062.69	USN-8607-1
Ubuntu 24.04 LTS	linux-gcp	6.8.0-1063.69	USN-8492-1
Ubuntu 24.04 LTS	linux-gcp-6.17	6.17.0-1020.22~24.04.1	USN-8490-1
Ubuntu 24.04 LTS	linux-gke	6.8.0-1058.64	USN-8492-2
Ubuntu 24.04 LTS	linux-gkeop	6.8.0-1045.48	USN-8492-2
Ubuntu 24.04 LTS	linux-hwe-6.17	6.17.0-40.40~24.04.1	USN-8545-1
Ubuntu 24.04 LTS	linux-ibm	6.8.0-1060.61	USN-8492-1
Ubuntu 24.04 LTS	linux-lowlatency	6.8.0-134.134.1	USN-8497-1
Ubuntu 24.04 LTS	linux-nvidia	6.8.0-1058.61	USN-8492-1
Ubuntu 24.04 LTS	linux-nvidia-6.17	6.17.0-1026.26	USN-8508-1
Ubuntu 24.04 LTS	linux-nvidia-lowlatency	6.8.0-1058.61.1	USN-8492-2
Ubuntu 24.04 LTS	linux-nvidia-tegra	6.8.0-1029.30	USN-8498-1
Ubuntu 24.04 LTS	linux-oem-6.17	6.17.0-1028.28	USN-8491-1
Ubuntu 24.04 LTS	linux-oracle	6.8.0-1057.58	USN-8492-1
Ubuntu 24.04 LTS	linux-oracle-6.17 +1	6.17.0-1018.18~24.04.1	USN-8605-1, USN-8490-1
Ubuntu 24.04 LTS	linux-raspi	6.8.0-1060.64	USN-8492-4
Ubuntu 24.04 LTS	linux-riscv +20	No fix yet	—
Ubuntu 24.04 LTS	linux-vmware	6.8.0-1008.8	—
Ubuntu 24.04 LTS	linux-xilinx	6.8.0-1032.33	USN-8499-1
Ubuntu 22.04 LTS	linux	5.15.0-187.197	USN-8631-1
Ubuntu 22.04 LTS	linux-aws	5.15.0-1113.120	USN-8631-1
Ubuntu 22.04 LTS	linux-aws-6.8	6.8.0-1060.63~22.04.1	USN-8492-2
Ubuntu 22.04 LTS	linux-azure +1	5.15.0-1118.127	USN-8631-1
Ubuntu 22.04 LTS	linux-azure-6.8	6.8.0-1063.71~22.04.1	USN-8606-1
Ubuntu 22.04 LTS	linux-azure-fde-6.8	6.8.0-1062.69~22.04.1	USN-8609-1
Ubuntu 22.04 LTS	linux-gcp	5.15.0-1114.124	USN-8661-1
Ubuntu 22.04 LTS	linux-gcp-6.8	6.8.0-1063.69~22.04.1	USN-8492-2
Ubuntu 22.04 LTS	linux-gke +1	5.15.0-1110.116	USN-8661-3, USN-8631-2
Ubuntu 22.04 LTS	linux-gkeop	5.15.0-1096.104	USN-8631-1
Ubuntu 22.04 LTS	linux-hwe-6.8	6.8.0-136.136~22.04.1	USN-8619-1
Ubuntu 22.04 LTS	linux-ibm	5.15.0-1107.111	USN-8631-1
Ubuntu 22.04 LTS	linux-ibm-6.8	6.8.0-1060.61~22.04.1	USN-8492-2
Ubuntu 22.04 LTS	linux-intel-iotg	5.15.0-1108.114	USN-8631-1
Ubuntu 22.04 LTS	linux-kvm	5.15.0-1105.110	USN-8631-1
Ubuntu 22.04 LTS	linux-lowlatency	5.15.0-190.200	USN-8661-2
Ubuntu 22.04 LTS	linux-lowlatency-hwe-6.8	6.8.0-134.134.1~22.04.1	USN-8497-1
Ubuntu 22.04 LTS	linux-nvidia	5.15.0-1108.109	USN-8631-1
Ubuntu 22.04 LTS	linux-nvidia-6.8	6.8.0-1058.61~22.04.1	USN-8492-1
Ubuntu 22.04 LTS	linux-nvidia-tegra	5.15.0-1065.67	USN-8631-1
Ubuntu 22.04 LTS	linux-nvidia-tegra-igx	5.15.0-1054.54	USN-8631-3
Ubuntu 22.04 LTS	linux-oracle-6.8	6.8.0-1057.58~22.04.1	USN-8492-2
Ubuntu 22.04 LTS	linux-raspi	5.15.0-1108.111	USN-8661-5
Ubuntu 22.04 LTS	linux-riscv +32	No fix yet	—
Ubuntu 22.04 LTS	linux-riscv-6.8	6.8.0-134.134~22.04.1	—
Ubuntu 22.04 LTS	linux-xilinx-zynqmp	5.15.0-1076.80	USN-8631-1

Show 14 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu 20.04 LTS	linux-gke +28	No fix yet	—
Ubuntu 18.04 LTS	linux-gcp +14	No fix yet	—
Ubuntu 16.04 LTS	linux-hwe-edge	No fix yet	—
Ubuntu Pro Realtime 24.04 LTS	linux-raspi-realtime	6.8.0-2049.50	USN-8492-3
Ubuntu Pro Realtime 24.04 LTS	linux-realtime	6.8.1-1055.56	USN-8492-1
Ubuntu Pro Realtime 24.04 LTS	linux-realtime-6.14	No fix yet	—
Ubuntu Pro Realtime 24.04 LTS	linux-realtime-6.17	6.17.0-1017.19~24.04.1	USN-8490-2
Ubuntu Pro Realtime 22.04 LTS	linux-intel-iot-realtime	5.15.0-1105.107	USN-8631-1
Ubuntu Pro Realtime 22.04 LTS	linux-realtime	5.15.0-1112.121	USN-8631-1
Ubuntu Pro Realtime 22.04 LTS	linux-realtime-6.8	6.8.1-1055.56~22.04.1	USN-8492-1
Ubuntu Pro FIPS-updates 24.04 LTS	linux-aws-fips	6.8.0-1060.63+fips1	USN-8492-1
Ubuntu Pro FIPS-updates 24.04 LTS	linux-azure-fips	6.8.0-1062.69+fips1	USN-8492-5
Ubuntu Pro FIPS-updates 24.04 LTS	linux-fips	6.8.0-134.134+fips1	USN-8492-5
Ubuntu Pro FIPS-updates 24.04 LTS	linux-gcp-fips	6.8.0-1063.69+fips1	USN-8492-1
Ubuntu Pro FIPS-updates 22.04 LTS	linux-aws-fips	5.15.0-1113.120+fips1	USN-8631-1
Ubuntu Pro FIPS-updates 22.04 LTS	linux-azure-fips	5.15.0-1118.127+fips1	USN-8631-1
Ubuntu Pro FIPS-updates 22.04 LTS	linux-fips	5.15.0-190.200+fips1	USN-8661-3
Ubuntu Pro FIPS-updates 22.04 LTS	linux-gcp-fips	5.15.0-1114.124+fips1	USN-8661-1
Ubuntu Pro FIPS-preview 22.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro 26.04 LTS	linux	7.0.0-30.30	LSN-0122-1
Ubuntu Pro 26.04 LTS	linux-aws	7.0.0-1011.11	LSN-0122-1
Ubuntu Pro 26.04 LTS	linux-azure	7.0.0-1012.12	LSN-0122-1
Ubuntu Pro 26.04 LTS	linux-gcp	7.0.0-1010.10	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux	6.8.0-142.142	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-aws	6.8.0-1065.68	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-azure	6.8.0-1068.76	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-gcp	6.8.0-1069.77	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-gke	6.8.0-1064.72	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-ibm	6.8.0-1065.66	LSN-0122-1
Ubuntu Pro 24.04 LTS	linux-oracle	6.8.0-1062.65	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux	5.15.0-202.212	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-aws	5.15.0-1119.126	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-aws-6.8	6.8.0-1065.68~22.04.1	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-azure	5.15.0-1125.134	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-gcp	5.15.0-1120.130	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-gcp-6.8	6.8.0-1069.77~22.04.1	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-gke	5.15.0-1115.121	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-hwe-6.8	6.8.0-149.149~22.04.1	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-ibm	5.15.0-1113.117	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-ibm-6.8	6.8.0-1066.67~22.04.1	LSN-0122-1
Ubuntu Pro 22.04 LTS	linux-lowlatency	5.15.0-197.207	LSN-0122-1
Ubuntu Pro 20.04 LTS	linux	5.4.0-245.265	LSN-0122-1
Ubuntu Pro 20.04 LTS	linux-aws-5.15	5.15.0-1114.121~20.04.1	USN-8661-4
Ubuntu Pro 20.04 LTS	linux-azure-5.15	5.15.0-1119.128~20.04.1	USN-8661-1
Ubuntu Pro 20.04 LTS	linux-azure-fde-5.15	5.15.0-1118.127~20.04.1	USN-8631-4
Ubuntu Pro 20.04 LTS	linux-gcp-5.15	5.15.0-1114.124~20.04.1	USN-8661-4
Ubuntu Pro 20.04 LTS	linux-hwe-5.15 +1	5.15.0-190.200~20.04.1	USN-8661-1
Ubuntu Pro 20.04 LTS	linux-ibm-5.15 +1	5.15.0-1107.111~20.04.1	USN-8631-1
Ubuntu Pro 20.04 LTS	linux-intel-iotg-5.15	5.15.0-1108.114~20.04.1	USN-8631-1
Ubuntu Pro 20.04 LTS	linux-nvidia-tegra-5.15	5.15.0-1065.67~20.04.1	USN-8631-1
Ubuntu Pro 20.04 LTS	linux-oracle-5.15	5.15.0-1110.116~20.04.1	USN-8631-1
Ubuntu Pro 18.04 LTS	linux	4.15.0-260.272	LSN-0122-1
Ubuntu Pro 18.04 LTS	linux-aws	4.15.0-1197.210	LSN-0122-1
Ubuntu Pro 18.04 LTS	linux-azure-4.15	4.15.0-1207.222	LSN-0122-1
Ubuntu Pro 18.04 LTS	linux-gcp-4.15	4.15.0-1190.207	LSN-0122-1
Ubuntu Pro 18.04 LTS	linux-hwe-5.4	5.4.0-245.265~18.04.1	LSN-0122-1
Ubuntu Pro 18.04 LTS	linux-oracle	4.15.0-1160.171	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux	4.4.0-291.325	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux-aws	4.4.0-1200.215	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux-aws-hwe	4.15.0-1197.210~16.04.1	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux-azure	4.15.0-1208.223~16.04.1	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux-gcp	4.15.0-1190.207~16.04.1	LSN-0122-1
Ubuntu Pro 16.04 LTS	linux-hwe	4.15.0-260.272~16.04.2	LSN-0122-1

Advisories 31

LSN-0122-1 Kernel Live Patch Security Notice Ubuntu Security Notices (USN) · Nov 12, 2026
WID-SEC-2026-1454 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
USN-8606-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8607-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8619-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8609-1 linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8604-1 linux-azure-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8546-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8508-1 linux-nvidia-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8491-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8545-1 linux-hwe-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
USN-8492-1 linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8492-2 linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8498-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8492-3 linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8492-5 linux-azure-fips, linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8492-4 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
USN-8605-1 linux-azure-fde-6.17 vulnerabilities Ubuntu Security Notices (USN) · Oct 17, 2026
USN-8631-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gkeop, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 8, 2026
USN-8661-5 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Sep 22, 2026
USN-8661-1 linux-azure-5.15, linux-gcp, linux-gcp-fips, linux-hwe-5.15, linux-lowlatency-hwe-5.15 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8661-4 linux-aws-5.15, linux-gcp-5.15 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8631-2 linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8661-2 linux-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8661-3 linux-fips, linux-gke vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8631-3 linux-nvidia-tegra-igx vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
USN-8631-4 linux-azure-fde-5.15 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026

References