CVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference

A vulnerability was found in Linux Kernel up to 6.12.109/6.18.51/7.2.5 and classified as critical. This impacts the function ksmbd_ipc_tree_connect_request of the file smb/server of the component ksmbd. Executing a manipulation can lead to null pointer dereference.

This vulnerability is registered as CVE-2026-90166. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More