CVE-2026-98453None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Last analysed / modified upstream
0.2% → 0.2%
In the Linux kernel, the following vulnerability has been resolved:
smb: client: close handle after create-context parsing failure
SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated.
Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.
Linux >= 17a0f64cc02d4972e21c733d9f21d1c512963afa < eaa97a196a107d4ef8775df2248181624151812eLinux >= af1689a9b7701d9907dfc84d2a4b57c4bc907144 < 80c67cc71d32ccafc89a29b669243b40d81b930fLinux >= af1689a9b7701d9907dfc84d2a4b57c4bc907144 < f09875ff901e933e7b22c913daf51d21e9d93a45Linux >= af1689a9b7701d9907dfc84d2a4b57c4bc907144 < cdb36b09fb1f86d638d0afb44d621ed3f7c1d8ebLinux >= af1689a9b7701d9907dfc84d2a4b57c4bc907144 < 566820af017e81497fb5e9d3ad6e7ffe2828bc8bLinux 6726429c18c62dbf5e96ebbd522f262e016553fbLinux 13fb0fc4917621f3dfa285a27eaf7151d770b5e5Linux 890bc4fac3c0973a49cac35f634579bebba7fe48Linux 1ae3c59355dc9882e09c020afe8ffbd895ad0f29Linux >= 6.6.8 < 6.6.160Linux >= 5.4.277 < 5.5Linux >= 5.10.211 < 5.11Linux >= 5.15.150 < 5.16Linux >= 6.1.79 < 6.2Linux 6.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets