CVE-2026-23228

Published: Feb 18, 2026Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

Affected (10)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.15.91 ≤ version < 5.15.201
Linux Linux Kernel	6.1.9 ≤ version < 6.1.164
Linux Linux Kernel	6.13 ≤ version < 6.18.11
Linux Linux Kernel	6.19 ≤ version < 6.19.1
Linux Linux Kernel	6.2.1 ≤ version < 6.6.125
Linux Linux Kernel	6.7 ≤ version < 6.12.72
Linux Linux Kernel	Version 6.2
Linux Linux Kernel	Version 6.2 rc6
Linux Linux Kernel	Version 6.2 rc7
Linux Linux Kernel	Version 6.2 rc8