Linux Kernel SMB Client Incomplete Backport Vulnerability in CFIDs Invalidation Worker

A vulnerability exists in the Linux kernel's SMB client component due to an incomplete backport related to reference count management. The issue arises in the 'cfids_invalidation_worker()' function, where a necessary 'kref_put()' call was omitted. This oversight could potentially lead to a use-after-free condition by not properly managing the reference count of cached file identifiers. The vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could lead to a use-after-free condition, which may be exploited to cause memory corruption or execute arbitrary code.