CVE-2026-23228

Published: Feb 18, 2026Modified: Jun 2, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.15.91 to 5.15.201
Linux Linux Kernel	From 6.1.9 to 6.1.164
Linux Linux Kernel	From 6.13 to 6.18.11
Linux Linux Kernel	From 6.19 to 6.19.1
Linux Linux Kernel	From 6.2.1 to 6.6.125
Linux Linux Kernel	From 6.7 to 6.12.72
Linux Linux Kernel	Version 6.2
Linux Linux Kernel	Version 6.2 rc6
Linux Linux Kernel	Version 6.2 rc7
Linux Linux Kernel	Version 6.2 rc8