CVE-2026-43239CWE-362

CVE-2026-43239

High · published May 6, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: prevent races in ->query_interfaces()

It was possible for two query interface works to be concurrently trying

to update the interfaces.

Prevent this by checking and updating iface_last_update under

iface_lock.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-05-06T16:16Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.19.1, < 6.6.1286.6.128
linux/linux_kernel≥ 6.7, < 6.12.756.12.75
linux/linux_kernel≥ 6.13, < 6.18.166.18.16
linux/linux_kernel≥ 6.19, < 6.19.66.19.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
https://git.kernel.org/stable/c/6287eefaf21ec805d42f941bd368018cf397a7f5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/76cc4faba0343c6db945b8dc75425b33d633e1b8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/93e8e3ee165ae4609a1222b516b573837103d2c3 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ab6564f416a6eaf1199200b6100952407b438f7d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c3c06e42e1527716c54f3ad2ced6a034b5f3a489 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 06 MAY 11:28Z
    smb: client: prevent races in ->query_interfaces()
    cvelistv5