CVE-2026-64016

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ksmbd: fix durable reconnect error path file lifetime<br /> <br /> After a durable reconnect succeeds, ksmbd_reopen_durable_fd() republishes<br /> the same ksmbd_file into the session volatile-id table. If smb2_open()<br /> then takes a later error path, cleanup first calls ksmbd_fd_put(work, fp)<br /> and then unconditionally calls ksmbd_put_durable_fd(dh_info.fp).<br /> <br /> In this case fp and dh_info.fp are the same object. The first put drops the<br /> reconnect lookup reference, but the final durable put can run<br /> __ksmbd_close_fd(NULL, fp). Because the final close is not session-aware,<br /> it can free the file object without removing the volatile-id entry that was<br /> just published into the session table.<br /> <br /> Use the session-aware put for the final reconnect drop when the reconnect<br /> had already succeeded and the error path is cleaning up the republished<br /> file. Earlier reconnect failures, before fp is assigned to dh_info.fp, keep<br /> using the durable-only put path.