CVE-2026-98112
Linux: ksmbd: fix listener task lifetime on netdev events
Linux LinuxOperating systemsCVSS
7.8HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 40581f10c1e56238b157af5f260b8f9518a0cbc1LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix listener task lifetime on netdev events
The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthread_stop(), so the task_struct can be freed before kthread_stop() gets its reference.
Create the listener in a stopped state and hold an extra task_struct reference until kthread_stop_put() completes. Also stop and release listeners before freeing their interface records during TCP teardown.
Text from CVE List
Affected versions 6
- Linuxaffected: 3316a8fc840d82fad5efcf76ad0ea3f76fdca209 before 40581f10c1e56238b157af5f260b8f9518a0cbc1CVE List
- Linuxaffected: 3316a8fc840d82fad5efcf76ad0ea3f76fdca209 before a506290f59e1c6ce9ac0a13158640bb8fee93471CVE List
- Linuxaffected: 6.19CVE List
- Linuxunaffected: all versions before 6.19CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List