Linux Kernel ksmbd Use-After-Free Vulnerability in Multichannel Connection

A use-after-free vulnerability has been identified in the Linux kernel's ksmbd component, specifically in multichannel connections. This issue arises from a race condition between session setup and the deregistration of sessions, allowing a session to be freed before its connection is added to the session's channel list. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.