CVE-2026-98162

kernel: smb/server: fix tree connection leak in smb2_tree_connect()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 25, 2026

Updated · October 3, 2026

Description

A flaw was found in the Linux kernel's Server Message Block (SMB) file server (ksmbd). A remote attacker could cause a Denial of Service (DoS) by sending tree connect requests that encounter an error during response processing. Because the server fails to properly clean up and release connection structures when an error occurs, repeated failures result in a resource leak that can exhaust system memory.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime