CVE-2026-98681smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock_break_cancelled, offload, and status_file_deleted fields are stored in the same bitfield byte in struct cifsFileInfo, but are updated in different code paths that may run simultaneously, and are protected by different locks. Since bitfield assignments generate byte-level read-modify-write operations, a modification to one flag can overwrite a concurrent modification to another flag. To avoid these races, convert these flags from a bitfield to separate bool fields.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3bc303c254335dbd7c7012cc1760b12f1d5514d3 before 3786ee67658a2c80fef2544e7de2cd329e043cf9; from 3bc303c254335dbd7c7012cc1760b12f1d5514d3 before 4165641d06ef44f3a31b77a28048b6c737e885e7; from 3bc303c254335dbd7c7012cc1760b12f1d5514d3 before d9d23d115610e0342e768f6cb525d91c7b154027; from 3bc303c254335dbd7c7012cc1760b12f1d5514d3 before 19465a9aeb664f1d710d0d22c07c31bfb7c85446 | CNA record |
References
- https://git.kernel.org/stable/c/3786ee67658a2c80fef2544e7de2cd329e043cf9
- https://git.kernel.org/stable/c/4165641d06ef44f3a31b77a28048b6c737e885e7
- https://git.kernel.org/stable/c/d9d23d115610e0342e768f6cb525d91c7b154027
- https://git.kernel.org/stable/c/19465a9aeb664f1d710d0d22c07c31bfb7c85446
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.