BaselineWatch
Desk

CVE-2026-98112

7.8 high Analyzed

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthread_stop(), so the task_struct can be freed before kthread_stop() gets its reference. Create the listener in a stopped state and hold an extra task_struct reference until kthread_stop_put() completes. Also stop and release listeners before freeing their interface records during TCP teardown.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 5

  1. CwesCWE-362, CWE-416NVD modified 2026-10-28 18:49
  2. Cpes+2 CPE criteria (now 2)NVD modified 2026-10-28 18:49
  3. StatusPublished → AnalyzedNVD modified 2026-10-28 18:49
  4. StatusUndergoing Analysis → PublishedNVD modified 2026-10-19 09:14
  5. First seenCVSS 7.8NVD modified 2026-10-19 10:18

Affected (CPE criteria) 2

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.3:rc1:*:*:*:*:*:*

References 2