CVE-2026-23228

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter.

Replace free_transport() with ksmbd_tcp_disconnect().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 4210c3555db4b38bade92331b153e583261f05f9, < 6dd2645cf080a75be31fa66063c7332b291f46f0; >= d5d7847e57ac69fa99c18b363a34419bcdb5a281, < 7ddd69cd1338c6197e1b6b19cec60d99c8633e4f; >= 0d0d4680db22eda1eea785c47bbf66a9b33a8b16, < 787769c8cc50416af7b8b1a36e6bcd6aaa7680aa; >= 0d0d4680db22eda1eea785c47bbf66a9b33a8b16, < baf664fc90a6139a39a58333e4aaa390c10d45dc; >= 0d0d4680db22eda1eea785c47bbf66a9b33a8b16, < cd25e0d809531a67e9dd53b19012d27d2b13425f; >= 0d0d4680db22eda1eea785c47bbf66a9b33a8b16, < 599271110c35f6b16e2e4e45b9fbd47ed378c982; >= 0d0d4680db22eda1eea785c47bbf66a9b33a8b16, < 77ffbcac4e569566d0092d5f22627dfc0896b553; >= 5.15.91, < 5.15.201; >= 6.1.9, < 6.1.164
LinuxLinux6.2
SiemensRUGGEDCOM RST2428P< V4.0

References

Timeline

Published
Feb 18, 2026
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-232295.5In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification WCVE-2026-23234.3Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a craCVE-2026-232305.5In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races CVE-2026-232317.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_taCVE-2026-232325.5In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" TCVE-2026-232337.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid mapping wrong physical block for swapfile Xiaolong CVE-2026-232347.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an usCVE-2026-232357.1In the Linux kernel, the following vulnerability has been resolved: f2fs: fix out-of-bounds access in sysfs attribute read/write Some f2fsCVE-2026-232365.5In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTCVE-2026-232375.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a fCVE-2026-232385.5In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignoreCVE-2026-232397.8In the Linux kernel, the following vulnerability has been resolved: espintcp: Fix race condition in espintcp_close() This issue was discov
CVE-2026-23228: Medium severity, CVSS 5.5 | Vulnix