Medium 5.5Published Feb 18, 2026

CVE-2026-23228smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

Updated under an hour ago (Oct 27, 2026, 2:10 PM ET)

Does this affect you?

It affects Linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jun 2, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	4210c3555db4b38bade92331b153e583261f05f9 builds before 6dd2645cf080a75be31fa66063c7332b291f46f0; from d5d7847e57ac69fa99c18b363a34419bcdb5a281 before 7ddd69cd1338c6197e1b6b19cec60d99c8633e4f; from 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 before 787769c8cc50416af7b8b1a36e6bcd6aaa7680aa; from 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 before baf664fc90a6139a39a58333e4aaa390c10d45dc; from 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 before cd25e0d809531a67e9dd53b19012d27d2b13425f; from 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 before 599271110c35f6b16e2e4e45b9fbd47ed378c982; from 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 before 77ffbcac4e569566d0092d5f22627dfc0896b553; from 5.15.91 before 5.15.201; and 1 more ranges	CNA record
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name)	before V4.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 5.15.91 before 5.15.201; from 6.1.9 before 6.1.164; from 6.2.1 before 6.6.125; from 6.7 before 6.12.72; from 6.13 before 6.18.11; from 6.19 before 6.19.1; 6.2; 6.2; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0	patch
https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f	patch
https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa	patch
https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc	patch
https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f	patch
https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982	patch
https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553	patch
https://cert-portal.siemens.com/productcert/html/ssa-253495.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.