All vulnerabilities
CVE-2026-98453

Linux: smb: client: close handle after create-context parsing failure

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in80c67cc71d32ccafc89a29b669243b40d81b930fAlso 566820af017e81497fb5e9d3ad6e7ffe2828bc8b, 6.6.160 and 4 moreCVE List
Published18 Oct 2026Updated 21 Oct 2026CVE List

What fixes it

Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: close handle after create-context parsing failure

SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated.

Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.

Text from CVE List

Affected versions 21

  • Linuxaffected: 17a0f64cc02d4972e21c733d9f21d1c512963afa before eaa97a196a107d4ef8775df2248181624151812eCVE List
  • Linuxaffected: af1689a9b7701d9907dfc84d2a4b57c4bc907144 before 80c67cc71d32ccafc89a29b669243b40d81b930fCVE List
  • Linuxaffected: af1689a9b7701d9907dfc84d2a4b57c4bc907144 before f09875ff901e933e7b22c913daf51d21e9d93a45CVE List
  • Linuxaffected: af1689a9b7701d9907dfc84d2a4b57c4bc907144 before cdb36b09fb1f86d638d0afb44d621ed3f7c1d8ebCVE List
  • Linuxaffected: af1689a9b7701d9907dfc84d2a4b57c4bc907144 before 566820af017e81497fb5e9d3ad6e7ffe2828bc8bCVE List
  • Linuxaffected: 6726429c18c62dbf5e96ebbd522f262e016553fbCVE List
  • Linuxaffected: 13fb0fc4917621f3dfa285a27eaf7151d770b5e5CVE List
  • Linuxaffected: 890bc4fac3c0973a49cac35f634579bebba7fe48CVE List
  • Linuxaffected: 1ae3c59355dc9882e09c020afe8ffbd895ad0f29CVE List
  • Linuxaffected: 6.6.8 before 6.6.160CVE List
  • Linuxaffected: 5.4.277 before 5.5CVE List
  • Linuxaffected: 5.10.211 before 5.11CVE List
  • Linuxaffected: 5.15.150 before 5.16CVE List
  • Linuxaffected: 6.1.79 before 6.2CVE List
  • Linuxaffected: 6.7CVE List
  • Linuxunaffected: all versions before 6.7CVE List
  • Linuxunaffected: 6.6.160 through 6.6.*CVE List
  • Linuxunaffected: 6.12.113 through 6.12.*CVE List
  • Linuxunaffected: 6.18.56 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 5