Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98172

smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < 3164402c58940ff58a3cecdb026405f07b0253afaffected
  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < e3344bb0ff5ec8a276f42239e140f5442841ef23affected
  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < 5c908e49d349266dff0c86dda6a05df0ff19b824affected
  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < 928edc4bd6a617caabeb575fc13c254d9df623c4affected
  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < b26a3fcf2f1c2cadba400290b639f01395db8fc8affected
  • 2f8946464b11822169b9f10c7cf58a2440b51d54 to < e75c96157d45e498970158c8f7373d90102e33b9affected

Linux Linux

Default version status: affected

  • 4.16affected
  • 0 to < 4.16unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.112 to ≤ 6.12.*unaffected
  • 6.18.54 to ≤ 6.18.*unaffected
  • 7.2.8 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References