CVE-2026-98439
Linux: smb/server: cancel async requests when closing connection
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.14%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0947087678f465b64eba2acebe808d5c6cfea036Also 4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851, 7.2.7CVE List
What fixes it
- 0947087678f465b64eba2acebe808d5c6cfea036LinuxCVE List
- 4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851LinuxCVE List
- 7.2.7LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
smb/server: cancel async requests when closing connection
An async request may still be waiting when a connection is closed. This can stop the connection from closing.
Cancel active async requests before waiting for them to finish.
Text from CVE List
Affected versions 5
- Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 0947087678f465b64eba2acebe808d5c6cfea036CVE List
- Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851CVE List
- Linuxaffected: all versions before 7.2.7CVE List
- Linuxunaffected: 7.2.7 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List