CVE-2026-23228
kernel: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · February 18, 2026
Updated · June 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter.
Replace free_transport() with ksmbd_tcp_disconnect().
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified