CVE-2026-98172

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 6, 2026
First seenOct 6, 2026

How to fix

Update
  • Linux Linuxc295f6505aec085d73e8dcea9f648c8af1b9da8c, 45a97df1b7fe6c1ca5493f8fb5284203991aeeb9, 3164402c58940ff58a3cecdb026405f07b0253af, e3344bb0ff5ec8a276f42239e140f5442841ef23, 5c908e49d349266dff0c86dda6a05df0ff19b824, 928edc4bd6a617caabeb575fc13c254d9df623c4, b26a3fcf2f1c2cadba400290b639f01395db8fc8, e75c96157d45e498970158c8f7373d90102e33b9 or later

Affected products

ProductAffected versionsFixed in
Linux Linux2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < c295f6505aec085d73e8dcea9f648c8af1b9da8c, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < 45a97df1b7fe6c1ca5493f8fb5284203991aeeb9, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < 3164402c58940ff58a3cecdb026405f07b0253af, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < e3344bb0ff5ec8a276f42239e140f5442841ef23, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < 5c908e49d349266dff0c86dda6a05df0ff19b824, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < 928edc4bd6a617caabeb575fc13c254d9df623c4, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < b26a3fcf2f1c2cadba400290b639f01395db8fc8, 2f8946464b11822169b9f10c7cf58a2440b51d54 ≤ v < e75c96157d45e498970158c8f7373d90102e33b9, 4.16c295f6505aec085d73e8dcea9f648c8af1b9da8c, 45a97df1b7fe6c1ca5493f8fb5284203991aeeb9, 3164402c58940ff58a3cecdb026405f07b0253af, e3344bb0ff5ec8a276f42239e140f5442841ef23, 5c908e49d349266dff0c86dda6a05df0ff19b824, 928edc4bd6a617caabeb575fc13c254d9df623c4, b26a3fcf2f1c2cadba400290b639f01395db8fc8, e75c96157d45e498970158c8f7373d90102e33b9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.