Riskcovery

CVE-2026-90154

ksmbd: scope session state changes to bound connections

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 21, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: scope session state changes to bound connections

ksmbd_all_conn_set_status() treats every connection whose transient binding flag is set as belonging to the target SessionId. A logoff or session replacement can consequently move an unrelated connection to NEED_RECONNECT or NEED_SETUP.

Pass the target session itself and select connections using either the connection-local session xarray or the session's permanent channel list. Use the same association test while waiting for requests to drain.

Serialize session-wide status changes under request_lock and do not overwrite EXITING or RELEASING. Protect the shutdown transition with the same lock so a concurrent session update cannot revive a closing connection.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 3deefd5fb1368e2577144b0961b1a5df26b587d1Affected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 3d66f3ec3c69fa242939a9f9e6815df33390b1bbAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 1ff0e41afbe73240a7d7b96d4e8e86d0aaf0fe0bAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 0875872718b98e8530fbc634e5aa7dbd3253b80dAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before c50e628122aed077695669e25b842e778511a43dAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.