CVE-2026-98172: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-98172DEBIAN-CVE-2026-98172
Published 06-10-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-98172 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.3% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.17%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:12131-1

Timeline

  1. 06-10-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

06-10-202621-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.113-1 | < 7.2.8-1
Linux1 product
  • linux≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < 3164402c58940ff58a3cecdb026405f07b0253af | ≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < e3344bb0ff5ec8a276f42239e140f5442841ef23 | ≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < 5c908e49d349266dff0c86dda6a05df0ff19b824 | ≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < 928edc4bd6a617caabeb575fc13c254d9df623c4 | ≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < b26a3fcf2f1c2cadba400290b639f01395db8fc8 | ≥ 2f8946464b11822169b9f10c7cf58a2440b51d54, < e75c96157d45e498970158c8f7373d90102e33b9 | 4.16

3 vendors · 167 products

References

10 links