CVE-2026-90163smb/server: call ksmbd_proc_cleanup() on module init failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbd_proc_cleanup() on module init failure When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to class_unregister(). Returning an error from module_init() leaves the proc tree and its per-CPU counters allocated.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b38f99c1217ae04753340f0fdcd8f35bf56841dc before 7d2cd9269b570347e6e2dd24d4b3c1da868bc91d; from b38f99c1217ae04753340f0fdcd8f35bf56841dc before f43cbe3b58ce989ce420c3bc875d48e7754c8aba | CNA record |
References
- https://git.kernel.org/stable/c/7d2cd9269b570347e6e2dd24d4b3c1da868bc91d
- https://git.kernel.org/stable/c/f43cbe3b58ce989ce420c3bc875d48e7754c8aba
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.