CVE-2026-98162

The Linux kernel contains a tree connection leak within the smb/server component, specifically in the smb2_tree_connect() function. The vulnerability occurs because if ksmbd_iov_pin_rsp() fails, the system returns a KSMBD_TREE_CONN_STATUS_NOMEM status without disconnecting the newly allocated tre...

CVE-2025-71220: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...

CVE-2025-38437: Use After Free

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbdiovpinrsp return error, use-after-free can happen by accessing opinfo-state and opinfoput and ksmbdfdput could called twice...