CVE-2026-98681

A flaw was found in the Linux kernel's SMB (Server Message Block) client. Multiple internal file status flags shared the same memory byte without unified locking, creating a race condition during concurrent file operations. A local user performing simultaneous file operations could cause updates to overwrite one another, leading to corrupted file state and a potential denial of service (DoS).

This vulnerability is rated as Moderate impact because exploitation requires a local authenticated user executing concurrent file operations on an actively mounted SMB/CIFS share. Under default configurations in Red Hat Enterprise Linux, CIFS network file systems are not mounted, significantly limiting initial exposure. While winning the race condition may cause file state corruption leading to a kernel crash and denial of service, it does not directly provide privilege escalation or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.