All vulnerabilities
CVE-2026-98162

Linux: smb/server: fix tree connection leak in smb2_tree_connect()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.11%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in39f2032096715daae5f6fd0f587ca7a474b019dfAlso 5.16, 6.2CVE List
Published25 Sep 2026Updated 21 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix tree connection leak in smb2_tree_connect()

See the procedure below:

smb2_tree_connect ksmbd_tree_conn_connect xa_store(&sess->tree_conns, tree_conn->id, tree_conn) ksmbd_counter_inc(KSMBD_COUNTER_TREE_CONNS) ksmbd_share_tree_conn_inc(sc) ksmbd_iov_pin_rsp // fail status.ret = KSMBD_TREE_CONN_STATUS_NOMEM // do not disconnect tree_conn

Disconnect the new tree connection if ksmbd_iov_pin_rsp() fails.

Text from CVE List

Affected versions 14

  • Linuxaffected: e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before fa0c45986fc60b3edfb35879f2fb0eacc0e49e98CVE List
  • Linuxaffected: e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before fea9c705bbc618ba6426424c9f8330555820c9ecCVE List
  • Linuxaffected: e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before a6c88e5e3a75f1e4a98ad4bc4037465ccd7925bcCVE List
  • Linuxaffected: e2b76ab8b5c9327ab2dae6da05d0752eb2f4771d before 39f2032096715daae5f6fd0f587ca7a474b019dfCVE List
  • Linuxaffected: f2283680a80571ca82d710bc6ecd8f8beac67d63CVE List
  • Linuxaffected: 9f297df20d93411c0b4ddad7f88ba04a7cd36e77CVE List
  • Linuxaffected: 5.15.145 before 5.16CVE List
  • Linuxaffected: 6.1.71 before 6.2CVE List
  • Linuxaffected: 6.6CVE List
  • Linuxunaffected: all versions before 6.6CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4