Linux Kernel ksmbd Dangling Pointer Vulnerability in Kerberos Authentication

A vulnerability in the Linux kernel's ksmbd component has been identified, involving a dangling pointer in the Kerberos authentication process. The issue arises because the function 'krb_authenticate' frees the 'sess->user' pointer without resetting it to NULL. Subsequently, 'smb2_sess_setup' can access this freed memory, leading to potential undefined behavior. This vulnerability has been addressed in the Linux kernel.

Impact

Exploitation of this vulnerability could lead to access of freed memory, potentially causing undefined behavior or memory corruption.