CVE-2026-90165
Published Sep 17, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() See the procedure below: ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR() server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer
Is your site exposed to CVE-2026-90165?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/3f8651f6bb52159c9e23993c77a2b51b9505ad64
https://git.kernel.org/stable/c/a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed
https://git.kernel.org/stable/c/af9cb997d13a17029a0d3863e33f4c837e27a8ae
https://git.kernel.org/stable/c/b2d78c199dfd983638662ace0612d4fade3dbea1
https://git.kernel.org/stable/c/bef46b604732d83f8da29f782868de4d25bf972c
Frequently Asked Questions
What is CVE-2026-90165? +
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
See the procedure below:
ksmbd_launch_ksmbd_durable_scavenger
durable_scavenger_running = true
server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()
server_ctrl_handle_reset
ksmbd_stop_durable_scavenger
kthread_stop(server_conf.dh_task) // invalid pointer
How do I check if I'm vulnerable to CVE-2026-90165? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.