CVE-2026-98112

High

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthread_stop(), so the task_struct can be freed before kthread_stop() gets its reference. Create the listener in a stopped state and hold an extra task_struct reference until kthread_stop_put() completes. Also stop and release listeners before freeing their interface records during TCP teardown.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux Kernel
PublishedSep 25, 2026
First seenSep 25, 2026

How to fix

Update
  • linux linux_kernel7.2.7 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.19 ≤ v < 7.2.7, 7.37.2.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.