Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
SMBD in Linux kernel: data corruption when using multiple SMB channels
UBUNTU-CVE-2026-23226
Summary
A security update has been made to the Linux kernel's SMBD component to prevent data corruption when using multiple SMB channels. This update protects against a rare issue where corrupted data could be accessed after it had been deleted. SMBD is used in some Linux distributions for providing SMB (file sharing) services. To stay protected, make sure your Linux distribution has applied the latest security updates.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-lts-xenial | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-hwe | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-hwe | All versions | – |
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.0 | All versions | – |
| canonical | linux-aws-5.3 | All versions | – |
| canonical | linux-aws-5.4 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-4.15 | All versions | – |
| canonical | linux-azure-5.3 | All versions | – |
| canonical | linux-azure-5.4 | All versions | – |
| canonical | linux-azure-edge | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-4.15 | All versions | – |
| canonical | linux-gcp-5.3 | All versions | – |
| canonical | linux-gcp-5.4 | All versions | – |
| canonical | linux-gke-4.15 | All versions | – |
| canonical | linux-gke-5.4 | All versions | – |
| canonical | linux-gkeop-5.4 | All versions | – |
| canonical | linux-hwe | All versions | – |
| canonical | linux-hwe-5.4 | All versions | – |
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-ibm-5.4 | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-oem | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-5.0 | All versions | – |
| canonical | linux-oracle-5.3 | All versions | – |
| canonical | linux-oracle-5.4 | All versions | – |
| canonical | linux-raspi-5.4 | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.11 | All versions | – |
| canonical | linux-aws-5.13 | All versions | – |
| canonical | linux-aws-5.15 | All versions | – |
| canonical | linux-aws-5.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.11 | All versions | – |
| canonical | linux-azure-5.13 | All versions | – |
| canonical | linux-azure-5.15 | All versions | – |
| canonical | linux-azure-5.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-5.15 | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.11 | All versions | – |
| canonical | linux-gcp-5.13 | All versions | – |
| canonical | linux-gcp-5.15 | All versions | – |
| canonical | linux-gcp-5.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gke-5.15 | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-gkeop-5.15 | All versions | – |
| canonical | linux-hwe-5.11 | All versions | – |
| canonical | linux-hwe-5.13 | All versions | – |
| canonical | linux-hwe-5.15 | All versions | – |
| canonical | linux-hwe-5.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-5.15 | All versions | – |
| canonical | linux-intel-5.13 | All versions | – |
| canonical | linux-intel-iotg-5.15 | All versions | – |
| canonical | linux-iot | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency-hwe-5.15 | All versions | – |
| canonical | linux-nvidia-tegra-5.15 | All versions | – |
| canonical | linux-oem-5.10 | All versions | – |
| canonical | linux-oem-5.13 | All versions | – |
| canonical | linux-oem-5.14 | All versions | – |
| canonical | linux-oem-5.6 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-5.11 | All versions | – |
| canonical | linux-oracle-5.13 | All versions | – |
| canonical | linux-oracle-5.15 | All versions | – |
| canonical | linux-oracle-5.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi2 | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.11 | All versions | – |
| canonical | linux-riscv-5.15 | All versions | – |
| canonical | linux-riscv-5.8 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-allwinner-5.19 | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.19 | All versions | – |
| canonical | linux-aws-6.2 | All versions | – |
| canonical | linux-aws-6.5 | All versions | – |
| canonical | linux-aws-6.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.19 | All versions | – |
| canonical | linux-azure-6.2 | All versions | – |
| canonical | linux-azure-6.5 | All versions | – |
| canonical | linux-azure-6.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-5.19 | All versions | – |
| canonical | linux-azure-fde-6.2 | All versions | – |
| canonical | linux-azure-fde-6.8 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.19 | All versions | – |
| canonical | linux-gcp-6.2 | All versions | – |
| canonical | linux-gcp-6.5 | All versions | – |
| canonical | linux-gcp-6.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-5.19 | All versions | – |
| canonical | linux-hwe-6.2 | All versions | – |
| canonical | linux-hwe-6.5 | All versions | – |
| canonical | linux-hwe-6.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-6.8 | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-intel-iotg | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-5.19 | All versions | – |
| canonical | linux-lowlatency-hwe-6.2 | All versions | – |
| canonical | linux-lowlatency-hwe-6.5 | All versions | – |
| canonical | linux-lowlatency-hwe-6.8 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.2 | All versions | – |
| canonical | linux-nvidia-6.5 | All versions | – |
| canonical | linux-nvidia-6.8 | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-nvidia-tegra-igx | All versions | – |
| canonical | linux-oem-5.17 | All versions | – |
| canonical | linux-oem-6.0 | All versions | – |
| canonical | linux-oem-6.1 | All versions | – |
| canonical | linux-oem-6.5 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.5 | All versions | – |
| canonical | linux-oracle-6.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.19 | All versions | – |
| canonical | linux-riscv-6.5 | All versions | – |
| canonical | linux-riscv-6.8 | All versions | – |
| canonical | linux-starfive-5.19 | All versions | – |
| canonical | linux-starfive-6.2 | All versions | – |
| canonical | linux-starfive-6.5 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.8 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-6.14 | All versions | – |
| canonical | linux-aws-6.17 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-6.11 | All versions | – |
| canonical | linux-azure-6.14 | All versions | – |
| canonical | linux-azure-6.17 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-6.14 | All versions | – |
| canonical | linux-azure-fde-6.17 | All versions | – |
| canonical | linux-azure-nvidia | All versions | – |
| canonical | linux-azure-nvidia-6.14 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-6.11 | All versions | – |
| canonical | linux-gcp-6.14 | All versions | – |
| canonical | linux-gcp-6.17 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-6.11 | All versions | – |
| canonical | linux-hwe-6.14 | All versions | – |
| canonical | linux-hwe-6.17 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-6.11 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.11 | All versions | – |
| canonical | linux-nvidia-lowlatency | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-oem-6.11 | All versions | – |
| canonical | linux-oem-6.14 | All versions | – |
| canonical | linux-oem-6.17 | All versions | – |
| canonical | linux-oem-6.8 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.14 | All versions | – |
| canonical | linux-oracle-6.17 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-6.14 | All versions | – |
| canonical | linux-riscv-6.17 | All versions | – |
| canonical | linux-xilinx | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.14 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
Original title
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free i...
Original description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: add chann_lock to protect ksmbd_chann_list xarray ksmbd_chann_list xarray lacks synchronization, allowing use-after-free in multi-channel sessions (between lookup_chann_list() and ksmbd_chann_del). Adds rw_semaphore chann_lock to struct ksmbd_session and protects all xa_load/xa_store/xa_erase accesses.
osv CVSS3.1
7.8
- https://ubuntu.com/security/CVE-2026-23226 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23226 Third Party Advisory
- https://git.kernel.org/stable/c/36ef605c0395b94b826a8c8d6f2697071173de6e Third Party Advisory
- https://git.kernel.org/stable/c/e4a8a96a93d08570e0405cfd989a8a07e5b6ff33 Third Party Advisory
Published: 18 Feb 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026