CVE-2026-90167 ksmbd: serialize oplock close with pending break ownership

In the Linux kernel, the following vulnerability has been resolved: ksmbd: serialize oplock close with pending break ownership close may abort an in-flight oplock break while another breaker already holds an opinfo reference. Releasing pendingbreak wakes that waiter, but without serializing the...

CVE-2026-90167

CVE-2026-90167 is a race condition in the Linux kernel's ksmbd (SMB server) component. The close operation may abort an in-flight oplock break while another breaker already holds an opinfo reference. Without proper serialization, a waiter can become a new break owner via the test_and_set_bit() fa...