CVE-2026-98420

The Linux kernel 's ksmbd component contains a vulnerability where the ksmbd_session_register() function incorrectly destroys valid sessions after ten seconds of inactivity during a new SessionSetup exchange. This occurs because the system confuses Session.IdleTime with Session.ExpirationTime . T...

CVE-2026-98420

In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbdsessionregister destroys valid sessions after ten seconds of inactivity whenever a client starts another SessionSetup exchange. This confuses Session.IdleTime with...