CVE-2026-98452: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends CREATE and QUERY_INFO as a compound request. If the CREATE succeeds but a later command returns an error, the function must retain the CREATE FID so common cleanup can issue SMB2_close(). It also must not treat a response error as a valid CREATE. Validate the CREATE response before using its fields, record the FIDs, and mark the handle open before handling errors from later compound commands. Move the -EREMCHG reconnect handling before response validation so a missing response does not hide the reconnect request. Count the handle when it is marked open; confirmed close responses decrement the counter, while existing close retry behavior remains best effort on transport failures.

Засегнати продукти

• Linux Linux: b0f6df737a1c5d9d5ff90cc946205d8af46cc067 преди 48958ddda3d7eee3600261e2d90671f63e055dc4; b0f6df737a1c5d9d5ff90cc946205d8af46cc067 преди abab661eed00fa102d3c35ddf1cce4f687e718c1; b0f6df737a1c5d9d5ff90cc946205d8af46cc067 преди 7c1509598a4fdfb54cb09ce33e4405bd6dbd8295; b0f6df737a1c5d9d5ff90cc946205d8af46cc067 преди d2ff5fb93ea83034025850266b5eed391f96b825
• Linux Linux: 5.1; преди 5.1; 6.12.112 до 6.12.*; 6.18.55 до 6.18.*; 7.2.9 до 7.2.*; 7.3 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98452
• https://nvd.nist.gov/vuln/detail/CVE-2026-98452
• https://git.kernel.org/stable/c/48958ddda3d7eee3600261e2d90671f63e055dc4
• https://git.kernel.org/stable/c/abab661eed00fa102d3c35ddf1cce4f687e718c1
• https://git.kernel.org/stable/c/7c1509598a4fdfb54cb09ce33e4405bd6dbd8295
• https://git.kernel.org/stable/c/d2ff5fb93ea83034025850266b5eed391f96b825