CVE-2026-90152

A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbd_session_register() function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote attacker to cause a Denial of Service (DoS) by depleting available system resources.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.