NetSight
IP …
medium5.5

CVE-2026-23228

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() fai…

Impact

In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() On kthread_run() failure in ksmbd_tcp_new_connection(), the transport is freed via free_transport(), which does not decrement active_num_conn, leaking this counter. Replace free_transport() with ksmbd_tcp_disconnect().

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.15.91 before 5.15.201
from 6.1.9 before 6.1.164
from 6.2.1 before 6.6.125
from 6.7 before 6.12.72
from 6.13 before 6.18.11
from 6.19 before 6.19.1

Weakness classification

CWE-401

References