CVE-2026-98453
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated. Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedOct 18, 2026
First seenOct 18, 2026
How to fix
Update
- Linux Linuxd4c05b5cb0a3132453e36a300d45de44bf6783c4, ee61f1dc516d97afa79908140d0a8c556c2fe90c, 007b87f6a7c38959ed79cf7d3fd7b3b4eb5f67fd, eaa97a196a107d4ef8775df2248181624151812e, 80c67cc71d32ccafc89a29b669243b40d81b930f, f09875ff901e933e7b22c913daf51d21e9d93a45, cdb36b09fb1f86d638d0afb44d621ed3f7c1d8eb, 566820af017e81497fb5e9d3ad6e7ffe2828bc8b, 5.10.273, 5.15.224, 6.1.191, 6.6.160, 5.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 13fb0fc4917621f3dfa285a27eaf7151d770b5e5 ≤ v < d4c05b5cb0a3132453e36a300d45de44bf6783c4, 890bc4fac3c0973a49cac35f634579bebba7fe48 ≤ v < ee61f1dc516d97afa79908140d0a8c556c2fe90c, 1ae3c59355dc9882e09c020afe8ffbd895ad0f29 ≤ v < 007b87f6a7c38959ed79cf7d3fd7b3b4eb5f67fd, 17a0f64cc02d4972e21c733d9f21d1c512963afa ≤ v < eaa97a196a107d4ef8775df2248181624151812e, af1689a9b7701d9907dfc84d2a4b57c4bc907144 ≤ v < 80c67cc71d32ccafc89a29b669243b40d81b930f, af1689a9b7701d9907dfc84d2a4b57c4bc907144 ≤ v < f09875ff901e933e7b22c913daf51d21e9d93a45, af1689a9b7701d9907dfc84d2a4b57c4bc907144 ≤ v < cdb36b09fb1f86d638d0afb44d621ed3f7c1d8eb, af1689a9b7701d9907dfc84d2a4b57c4bc907144 ≤ v < 566820af017e81497fb5e9d3ad6e7ffe2828bc8b, 6726429c18c62dbf5e96ebbd522f262e016553fb, 5.10.211 ≤ v < 5.10.273, 5.15.150 ≤ v < 5.15.224, 6.1.79 ≤ v < 6.1.191, 6.6.8 ≤ v < 6.6.160, 5.4.277 ≤ v < 5.5, 6.7 | d4c05b5cb0a3132453e36a300d45de44bf6783c4, ee61f1dc516d97afa79908140d0a8c556c2fe90c, 007b87f6a7c38959ed79cf7d3fd7b3b4eb5f67fd, eaa97a196a107d4ef8775df2248181624151812e, 80c67cc71d32ccafc89a29b669243b40d81b930f, f09875ff901e933e7b22c913daf51d21e9d93a45, cdb36b09fb1f86d638d0afb44d621ed3f7c1d8eb, 566820af017e81497fb5e9d3ad6e7ffe2828bc8b, 5.10.273, 5.15.224, 6.1.191, 6.6.160, 5.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.