CVE-2026-98420

The Linux kernel 's ksmbd component contains a vulnerability where the ksmbd_session_register() function incorrectly destroys valid sessions after ten seconds of inactivity during a new SessionSetup exchange. This occurs because the system confuses Session.IdleTime with Session.ExpirationTime . T...