Linux Kernel ksmbd Component Use-After-Free Vulnerability in Multichannel Mode

A use-after-free vulnerability has been identified in the ksmbd component of the Linux kernel, specifically in multichannel mode. The issue arises in the session_deregister function when the second channel establishes a session through the connection of the first channel. This can lead to a situation where a session that has been freed and is no longer valid can still be accessed via the connection's session table.

Impact

Exploitation of this vulnerability can lead to memory corruption issues, allowing for potential arbitrary code execution or causing a denial-of-service condition by crashing the system.