Skip to content
Not rated

CVE-2026-23228 In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in…

Description

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

Affected products and versions

Product Affected versions Fixed in
Linux 7.0 earliest → < 7.0 7.0
Linux 6.19 earliest → < 6.19.1 6.19.1
Linux 6.18 earliest → < 6.18.11 6.18.11
Linux 6.12 earliest → < 6.12.72 6.12.72
Linux 6.6 earliest → < 6.6.125 6.6.125
Linux 6.2 No fix stated
Linux 6.1 earliest → < 6.1.164 6.1.164
Linux 5.15 earliest → < 5.15.201 5.15.201
RUGGEDCOM RST2428P 4.0 earliest → < 4.0 4.0

References

Timeline

  1. Published
  2. Last modified
The 18283 CVEs of Linux →
Track this CVE