CVE-2026-98172
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.
Affected versions
Linux kernel versions
4.16
and later are affected. Fixed in
6.1.189,
6.6.158,
6.12.112,
6.18.54,
7.2.8,
7.3-rc4
and their respective stable series.
References
6 totalFrequently asked questions
-
What is CVE-2026-98172?
CVE-2026-98172 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.16 onward and has been patched in 6.1.189, 6.6.158, 6.12.112 and others. CVE-2026-98172 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98172?
Yes. CVE-2026-98172 has been patched. Fixed versions include 6.1.189, 6.6.158, 6.12.112 and others. If you are running Linux kernel 4.16 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98172 actively exploited?
No. CVE-2026-98172 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.