CVE-2026-98172smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 6, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 3164402c58940ff58a3cecdb026405f07b0253af; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before e3344bb0ff5ec8a276f42239e140f5442841ef23; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 5c908e49d349266dff0c86dda6a05df0ff19b824; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 928edc4bd6a617caabeb575fc13c254d9df623c4; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before b26a3fcf2f1c2cadba400290b639f01395db8fc8; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before e75c96157d45e498970158c8f7373d90102e33b9 | CNA record |
References
- https://git.kernel.org/stable/c/3164402c58940ff58a3cecdb026405f07b0253af
- https://git.kernel.org/stable/c/e3344bb0ff5ec8a276f42239e140f5442841ef23
- https://git.kernel.org/stable/c/5c908e49d349266dff0c86dda6a05df0ff19b824
- https://git.kernel.org/stable/c/928edc4bd6a617caabeb575fc13c254d9df623c4
- https://git.kernel.org/stable/c/b26a3fcf2f1c2cadba400290b639f01395db8fc8
- https://git.kernel.org/stable/c/e75c96157d45e498970158c8f7373d90102e33b9
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.