CVE-2026-97562

The Linux kernel contains a vulnerability in the smb client where a race condition exists during DFS automount expiry . Specifically, tcon_super_cb() stores a raw superblock pointer, but __cifs_get_super() fails to take the active reference until after iterate_supers_type() has dropped the s_umou...

CVE-2026-97562 smb: client: pin DFS superblock in iterator callback

In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback tconsupercb stores a raw superblock pointer, but cifsgetsuper takes its active reference only after iteratesuperstype has dropped sumount and its passive reference. Concurrent...