5.5

CVE-2026-23228

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

In the Linux kernel, the following vulnerability has been resolved:

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is
freed via free_transport(), which does not decrement active_num_conn,
leaking this counter.

Replace free_transport() with ksmbd_tcp_disconnect().
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.15.91 < 5.15.201
Linux ≫ Linux Kernel Version >= 6.1.9 < 6.1.164
Linux ≫ Linux Kernel Version >= 6.2.1 < 6.6.125
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.72
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.11
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.1
Linux ≫ Linux Kernel Version6.2 Update-
Linux ≫ Linux Kernel Version6.2 Updaterc6
Linux ≫ Linux Kernel Version6.2 Updaterc7
Linux ≫ Linux Kernel Version6.2 Updaterc8
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://git.kernel.org/stable/c/787769c8cc50416af7b8b1a36e6bcd6aaa7680aa
Patch
https://git.kernel.org/stable/c/baf664fc90a6139a39a58333e4aaa390c10d45dc
Patch
https://git.kernel.org/stable/c/cd25e0d809531a67e9dd53b19012d27d2b13425f
Patch
https://git.kernel.org/stable/c/599271110c35f6b16e2e4e45b9fbd47ed378c982
Patch
https://git.kernel.org/stable/c/6dd2645cf080a75be31fa66063c7332b291f46f0
Patch
https://git.kernel.org/stable/c/7ddd69cd1338c6197e1b6b19cec60d99c8633e4f
Patch
https://git.kernel.org/stable/c/77ffbcac4e569566d0092d5f22627dfc0896b553
Patch
https://cert-portal.siemens.com/productcert/html/ssa-253495.html