Riskcovery

CVE-2026-43239

smb: client: prevent races in ->query_interfaces()

State
Published
Severity
8.8 High
Published
May 6, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: client: prevent races in ->query_interfaces()

It was possible for two query interface works to be concurrently trying to update the interfaces.

Prevent this by checking and updating iface_last_update under iface_lock.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HLinux

Weaknesses

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

ProductVersions
LinuxLinux
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before de3c1653510d566a245cc54ac4bb9e50ebc5faa8Affected
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before 93e8e3ee165ae4609a1222b516b573837103d2c3Affected
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before ab6564f416a6eaf1199200b6100952407b438f7dAffected
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before 6287eefaf21ec805d42f941bd368018cf397a7f5Affected
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before 76cc4faba0343c6db945b8dc75425b33d633e1b8Affected
  • aa45dadd34e44fcd6a9df4b395bee5b5633b4cec to before c3c06e42e1527716c54f3ad2ced6a034b5f3a489Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.