CVE-2026-23228

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

published February 18, 2026

CVSS
—
EPSS
0%
Percentile
3.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is

freed via free_transport(), which does not decrement active_num_conn,

leaking this counter.

Replace free_transport() with ksmbd_tcp_disconnect().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00139 · 3.0th percentile
Published
2026-02-18T14:53Z
EPSS history
Timeline
  • 18 FEB 14:53Z
    smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
    cvelistv5