# CVE-2026-90162

ksmbd UAF/double-free in SMB2_LOCK allows kernel memory corruption via crafted SMB requests

- Page: https://www.vulneraibility.com/cve/CVE-2026-90162
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.70% (percentile 53.3)
- Published: 2026-09-17

## Affected versions

- Linux: affected >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 and < a1d26dfb32919088e3638dca01068df3c4507433; >= e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 and < 29f74f0f2e6df3b393b7b66e810136d0c64e3c59; 5.15; fixed in < 5.15, >= 7.2.6 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Kernel use-after-free/double-free via malformed SMB2_LOCK batches; may cause kernel crash, privilege escalation, or remote code execution.

## Action

Immediate action required

## Recommendation

Apply the kernel patch / update to a fixed kernel or disable ksmbd immediately

## References

- [other] https://git.kernel.org/stable/c/f1371a140722c1d6868f9acf69d601de7d4142bf
- [other] https://git.kernel.org/stable/c/b68d4bb6b03a667c305626bd2c242fd162bac17e
- [other] https://git.kernel.org/stable/c/65f54ed0289e9a57e6c60b14347ccea4c318f1fc
- [other] https://git.kernel.org/stable/c/ff6870cf3b7eccc69d03cbb6f23e3995d96e9a8d
- [other] https://git.kernel.org/stable/c/a1d26dfb32919088e3638dca01068df3c4507433
- [other] https://git.kernel.org/stable/c/29f74f0f2e6df3b393b7b66e810136d0c64e3c59

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.