CVE-2026-98162

🔶 medium

Summary

In the Linux kernel, the following vulnerability has been resolved: smb/server: fix tree connection leak in smb2_tree_connect() See the procedure below: smb2_tree_connect ksmbd_tree_conn_connect xa_store(&sess->tree_conns, tree_conn->id, tree_conn) ksmbd_counter_inc(KSMBD_COUNTER_TREE_CONNS) ksmbd_share_tree_conn_inc(sc) ksmbd_iov_pin_rsp // fail status.ret = KSMBD_TREE_CONN_STATUS_NOMEM // do not disconnect tree_conn Disconnect the new tree connection if

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix tree connection leak in smb2_tree_connect()

See the procedure below:

smb2_tree_connect
ksmbd_tree_conn_connect
xa_store(&sess->tree_conns, tree_conn->id, tree_conn)
ksmbd_counter_inc(KSMBD_COUNTER_TREE_CONNS)
ksmbd_share_tree_conn_inc(sc)
ksmbd_iov_pin_rsp // fail
status.ret = KSMBD_TREE_CONN_STATUS_NOMEM
// do not disconnect tree_conn

Disconnect the new tree connection if ksmbd_iov_pin_rsp() fails.

CVSS Score

5.5

Medium

EPSS Score

0.1

Exploit Probability

Published Date

2026-09-25

First Seen: 2026-09-26

📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 31.3% of all 365,890 vulnerabilities in our database.

#251,398

Below average severity

Severity Percentile

Last Modified 2026-10-02

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE IDs (Weakness Types)

CWE-401

📦 Affected Products 3

Vendor	Product	Status	Affected Versions
linux	linux_kernel	Affected	> 5.15.145 < 5.16
linux	linux_kernel	Affected	> 6.1.71 < 6.2
linux	linux_kernel	Affected	> 6.6 < 7.2.6

🔗 References 2

https://git.kernel.org/stable/c/39f2032096715daae5f6...

Patch

https://git.kernel.org/stable/c/a6c88e5e3a75f1e4a98a...

Patch

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2026-98164	⚠️ high	7.1	0.2	In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address s...	2026-09-29
CVE-2026-98163	⚠️ high	7.8	0.1	In the Linux kernel, the following vulnerability has been resolved: cgroup: Avoid iteration of dying tasks with zero re...	2026-09-26
CVE-2026-98161	🔶 medium	5.5	0.1	In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pme...	2026-09-25
CVE-2026-98160	🔶 medium	5.5	0.1	In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix mismatched free of HalData ...	2026-09-25
CVE-2026-100079	🔶 medium	5.5	0.1	In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on tea...	2026-09-25
CVE-2026-100078	🔶 medium	5.5	0.1	In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: pass correct argument to functi...	2026-09-25

These CVEs affect the same products