CVE-2026-98451smb: client: use finish_no_open() for non-regular inodes
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find an existing symlink or another non-regular inode. cifs_atomic_open() calls finish_open() on it and attaches a cifsFileInfo. Symlink inodes have no CIFS release operation, so the dentry reference held by cifsFileInfo is leaked. FMODE_OPENED also prevents the VFS from following the symlink. Track whether cifs_do_create() returned an open server handle. For non-regular inodes, close the handle if present, remove the pending open, and call finish_no_open() so the VFS can continue the lookup. Do not set FMODE_CREATED unless a regular file was opened. For O_NOFOLLOW with __O_REGULAR, return -ELOOP before the VFS's -EFTYPE check. Defer closing a legacy POSIX handle on a non-regular inode until after inode lookup. This avoids closing it again if lookup fails.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from d2c127197dfc0b2bae62a52e1e0d3e3ff493919e before ed03d547598c92a036f20e89156540995cac889a; from d2c127197dfc0b2bae62a52e1e0d3e3ff493919e before 70a7918fda54a06d836acc91eb9a3c7e860fe0a0; from d2c127197dfc0b2bae62a52e1e0d3e3ff493919e before 3c07deb26273155c180aedfd9041ab58015d2521; from d2c127197dfc0b2bae62a52e1e0d3e3ff493919e before e66cf1625ec4a3fe68346119f371def713fd0a4d | CNA record |
References
- https://git.kernel.org/stable/c/ed03d547598c92a036f20e89156540995cac889a
- https://git.kernel.org/stable/c/70a7918fda54a06d836acc91eb9a3c7e860fe0a0
- https://git.kernel.org/stable/c/3c07deb26273155c180aedfd9041ab58015d2521
- https://git.kernel.org/stable/c/e66cf1625ec4a3fe68346119f371def713fd0a4d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.