CVE-2026-90154

CVE-2026-90154 affects the ksmbd subsystem of the Linux kernel . The function ksmbd_all_conn_set_status() incorrectly treats every connection with a transient binding flag as belonging to the target SessionId, so a logoff or session replacement can move an unrelated connection to NEED_RECONNECT o...