CVE-2026-98115

A flaw was found in the Linux kernel's ksmbd (Server Message Block) subsystem, which may lead to a Denial of Service (DoS). When terminating multichannel SMB connections, the server fails to properly synchronize and wait for all communication channels to finish before freeing shared session resources. A remote authenticated attacker could exploit this race condition by initiating a session logoff or cancellation while requests are still pending, potentially crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.