Live › vulnerability › CVE-2026-98439
Go to dashboardWhen a client connection to the Linux kernel's SMB server (ksmbd) closes while an asynchronous request is still waiting, the connection can fail to shut down. The fix cancels pending async requests before waiting for them to finish.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running the Linux kernel SMB server (ksmbd) with it enabled are the ones to check. The sources do not describe a specific configuration or role beyond that, so systems that do not run ksmbd are likely unaffected.
No product ranges from the sources yet.
uname -r and compare against the fixed kernel version listed in the NVD entry (unknown in sources)lsmod | grep ksmbdsystemctl status ksmbd (unknown if sources do not say otherwise)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
smb/server: cancel async requests when closing connection
An async request may still be waiting when a connection is closed. This can stop the connection from closing.
Cancel active async requests before waiting for them to finish.
This page as .md · .json · in your agent: get_signal("CVE-2026-98439")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.