CVE-2026-98897

A flaw was found in the Linux kernel's ksmbd (Kernel Server Message Block daemon). An authenticated remote user can cause a Denial of Service (DoS) by initiating conflicting file access requests on cached file leases. Because ksmbd holds an internal read lock while waiting for a lease break confirmation, the client's subsequent file closure is blocked from acquiring the lock, resulting in a thread stall until a 35-second timeout expires. This recurring delay can severely degrade file server responsiveness and disrupt file-sharing services.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.