Riskcovery

CVE-2026-98901

ksmbd: fix lease break and ack state handling

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 26, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix lease break and ack state handling

Do not skip valid lease states containing WRITE_CACHING when breaking level-II/read leases for writes and truncates.

Handle lease break acknowledgments according to the SMB2 rule that the acknowledged state must be a subset of the server's break target. Apply the acknowledged state directly and keep the break pending on failed ACKs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 17699905a381621c1cee5b6528feb05acedc86a4Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 3251ea36df5eef58aa207fbee48849d89b922ea6Affected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before fba4653a0b4dc2f6d42600abe21fb326292f70ffAffected
  • e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 to before 5015191096db311759fef98769270336cd8b1324Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.