Not yet scoredPublished Oct 6, 2026

CVE-2026-98172smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

Updated under an hour ago (Oct 27, 2026, 7:23 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 3164402c58940ff58a3cecdb026405f07b0253af; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before e3344bb0ff5ec8a276f42239e140f5442841ef23; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 5c908e49d349266dff0c86dda6a05df0ff19b824; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before 928edc4bd6a617caabeb575fc13c254d9df623c4; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before b26a3fcf2f1c2cadba400290b639f01395db8fc8; from 2f8946464b11822169b9f10c7cf58a2440b51d54 before e75c96157d45e498970158c8f7373d90102e33b9	CNA record

References

References

https://git.kernel.org/stable/c/3164402c58940ff58a3cecdb026405f07b0253af
https://git.kernel.org/stable/c/e3344bb0ff5ec8a276f42239e140f5442841ef23
https://git.kernel.org/stable/c/5c908e49d349266dff0c86dda6a05df0ff19b824
https://git.kernel.org/stable/c/928edc4bd6a617caabeb575fc13c254d9df623c4
https://git.kernel.org/stable/c/b26a3fcf2f1c2cadba400290b639f01395db8fc8
https://git.kernel.org/stable/c/e75c96157d45e498970158c8f7373d90102e33b9

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.