CVE-2026-98261

The Linux kernel contains a use-after-free vulnerability within the cifs component, specifically in the cifs_chan_skip_or_disable() function. The issue occurs when a secondary channel is no longer supported by the server; the function drops the channel reference via cifs_put_tcp_session() but con...

Linux kernel cifs_put_tcp_session function resource management error vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a resource management error vulnerability that stems from the fact that the cifsputtcpsession function may still be attempting to reconnect to a D...

CVE-2025-21673

CVE-2025-21673 affects the Linux kernel SMB CIFS client. The issue is a double free of TCP_Server_Info::hostname in cifs_put_tcp_session() when a cifsd thread reconnects to multiple DFS targets during shutdown. This can allow a memory release/use-after-free scenario leading to a crash (reported a...

CVE-2025-21673: Double Free

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCPServerInfo::hostname When shutting down the server in cifsputtcpsession, cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server-hostnam...