CVE-2026-98172

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

Is your site exposed to CVE-2026-98172?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0022

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/3164402c58940ff58a3cecdb026405f07b0253af https://git.kernel.org/stable/c/5c908e49d349266dff0c86dda6a05df0ff19b824 https://git.kernel.org/stable/c/928edc4bd6a617caabeb575fc13c254d9df623c4 https://git.kernel.org/stable/c/b26a3fcf2f1c2cadba400290b639f01395db8fc8 https://git.kernel.org/stable/c/e3344bb0ff5ec8a276f42239e140f5442841ef23 https://git.kernel.org/stable/c/e75c96157d45e498970158c8f7373d90102e33b9

Frequently Asked Questions

What is CVE-2026-98172? +

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully established via smbd_get_connection() but cifs_get_tcp_session() later fails (e.g. kthread_create() returns an error), the error path frees tcp_ses without first destroying the smbd_connection. Fix this by calling smbd_destroy() in the out_err cleanup path before kfree(tcp_ses). smbd_destroy() safely handles the case where smbd_conn is NULL, so it can be called unconditionally.

How do I check if I'm vulnerable to CVE-2026-98172? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.