Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-98901

ksmbd: fix lease break and ack state handling

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.6.158, 6.12.111, 6.18.53
None on Exploit-DB, Metasploit or GitHub

Summary

The Linux kernel's ksmbd component, which is the in-kernel SMB server used for file sharing, is affected. Improper handling of SMB lease break and acknowledgment states could cause incorrect cache-state handling during writes and truncates, potentially leading to data consistency problems for clients.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITE_CACHING when breaking level-II/read leases for writes and truncates. Handle lease break acknowledgments according to the SMB2 rule that the acknowledged state must be a subset of the server's break target. Apply the acknowledged state directly and keep the break pending on failed ACKs.

Timeline

  1. CVE published
  2. First seen by cve.now
  3. Record last updated

Affected versions

  • Linux Linux

    From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 17699905a381621c1cee5b6528feb05acedc86a4; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 3251ea36df5eef58aa207fbee48849d89b922ea6; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in fba4653a0b4dc2f6d42600abe21fb326292f70ff; From e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 · fixed in 5015191096db311759fef98769270336cd8b1324

  • Linux Linux

    5.15

  • KernelLinux

    fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53

References 4

git.kernel.org