Linux Kernel ksmbd Component Use-After-Free Vulnerability

A use-after-free vulnerability has been identified in the ksmbd component of the Linux kernel. The issue arises in the __smb2_lease_break_noti() function, where the tcp_transport associated with a ksmbd connection is freed before the connection itself is properly released. This can lead to a use-after-free condition when __smb2_lease_break_noti() is called asynchronously after a connection is disconnected, potentially allowing for exploitation.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, which commonly allows for memory corruption and arbitrary code execution.