CVE-2026-90165

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

See the procedure below:

ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()

server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7f0cb478703cbeaddfe5c9101c5c73cd975d1073 to before 3f8651f6bb52159c9e23993c77a2b51b9505ad64Affected d484d621d40f4a8b8959008802d79bef3609641b to before af9cb997d13a17029a0d3863e33f4c837e27a8aeAffected d484d621d40f4a8b8959008802d79bef3609641b to before b2d78c199dfd983638662ace0612d4fade3dbea1Affected d484d621d40f4a8b8959008802d79bef3609641b to before a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5edAffected d484d621d40f4a8b8959008802d79bef3609641b to before bef46b604732d83f8da29f782868de4d25bf972cAffected 6.6.142 to before 6.6.157Affected
LinuxLinux	6.11Affected before 6.11Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7f0cb478703cbeaddfe5c9101c5c73cd975d1073 to before 3f8651f6bb52159c9e23993c77a2b51b9505ad64Affected
d484d621d40f4a8b8959008802d79bef3609641b to before af9cb997d13a17029a0d3863e33f4c837e27a8aeAffected
d484d621d40f4a8b8959008802d79bef3609641b to before b2d78c199dfd983638662ace0612d4fade3dbea1Affected
d484d621d40f4a8b8959008802d79bef3609641b to before a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5edAffected
d484d621d40f4a8b8959008802d79bef3609641b to before bef46b604732d83f8da29f782868de4d25bf972cAffected
6.6.142 to before 6.6.157Affected

LinuxLinux

6.11Affected
before 6.11Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.