7.5

CVE-2026-97562: linux

CVSS: 7.5v3.1HighReceived
AliasesUBUNTU-CVE-2026-97562DEBIAN-CVE-2026-97562
Published 25-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-97562 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 33.8% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.41%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12074-1

Timeline

  1. 25-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tcon_super_cb() stores a raw superblock pointer, but __cifs_get_super() takes its active reference only after iterate_supers_type() has dropped s_umount and its passive reference. Concurrent DFS automount expiry can therefore free the superblock before cifs_sb_active() uses it. A deterministic KASAN test reproduces the race as: BUG: KASAN: slab-use-after-free in cifs_sb_active+0x77/0x80 The same test passes with this change applied. Take the active reference in the callback while iterate_supers_type() still holds s_umount shared. cifs_put_tcp_super() remains the matching release.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.41%

Chance of exploitation in the next 30 days

Percentile

34%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

26-09-202621-10-2026
EPSS score
0.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.12.111-1 | < 7.2.7-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ bacd704a95ad0b93af995aae4a523aa046f46563, < 3c9acc9835c304013a4faeb969fe9333d66ca9f8 | ≥ bacd704a95ad0b93af995aae4a523aa046f46563, < ea43a15cea36dc5ddd832be5bddeac7dd804cbcf | ≥ bacd704a95ad0b93af995aae4a523aa046f46563, < a6b6561522212af852c9ad8a7dca8d59ef2c7377 | ≥ bacd704a95ad0b93af995aae4a523aa046f46563, < 5b01a8c0209690db75341528ec53fd87e0ac1460 | ≥ bacd704a95ad0b93af995aae4a523aa046f46563, < d806d5a85dcbe2a0f181b2f0f9f61ddfbefa1818 | 5.7

3 vendors · 160 products

References

8 links