CVE-2026-93829
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation The cifsd demultiplex thread can run and access tcp_ses before the parent thread has finished populating tcp_ses, which the worker thread accesses locklessly. Also, the kthread_run macro may start the thread before returning the thread pointer. Because the pointer is part of the structure that the thread can access, if the kernel is preempted after the thread is spawned, but before the thread pointer is populated and the thread attempts to exit, it will sleep, waiting for a SIGKILL signal. Fix this by moving creation of the thread to after all of tcp_ses'es fields are populated, and spawning the thread last, using a split kthread_create/wake_up_process logic.
How to fix
- Linux Linux2376fb3348b4fa72a5158c8a63ff2489e1956541, cfa09f63e75cf440c9be97d1e73d509bfbb2c2c5, ee8f811cbac56ffb738b3a73671a9e75b0f56e99, 0eee1e6cddd1d9ce14da06e0238ca8d3362dec90, e8a5cf2ff5a13fefb228f2069e29dd7d8e37185d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | aaf737adb6937339494d5a7111f0433cd9676db8 ≤ v < 2376fb3348b4fa72a5158c8a63ff2489e1956541, aaf737adb6937339494d5a7111f0433cd9676db8 ≤ v < cfa09f63e75cf440c9be97d1e73d509bfbb2c2c5, aaf737adb6937339494d5a7111f0433cd9676db8 ≤ v < ee8f811cbac56ffb738b3a73671a9e75b0f56e99, aaf737adb6937339494d5a7111f0433cd9676db8 ≤ v < 0eee1e6cddd1d9ce14da06e0238ca8d3362dec90, aaf737adb6937339494d5a7111f0433cd9676db8 ≤ v < e8a5cf2ff5a13fefb228f2069e29dd7d8e37185d, 2.6.22 | 2376fb3348b4fa72a5158c8a63ff2489e1956541, cfa09f63e75cf440c9be97d1e73d509bfbb2c2c5, ee8f811cbac56ffb738b3a73671a9e75b0f56e99, 0eee1e6cddd1d9ce14da06e0238ca8d3362dec90, e8a5cf2ff5a13fefb228f2069e29dd7d8e37185d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.