FKIE_CVE-2026-90165

Vulnerability from fkie_nvd - Published: 2026-09-17 17:17 - Updated: 2026-09-17 17:17
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() See the procedure below: ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR() server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3f8651f6bb52159c9e23993c77a2b51b9505ad64
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/af9cb997d13a17029a0d3863e33f4c837e27a8ae
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b2d78c199dfd983638662ace0612d4fade3dbea1
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bef46b604732d83f8da29f782868de4d25bf972c
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/vfs_cache.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "3f8651f6bb52159c9e23993c77a2b51b9505ad64",
              "status": "affected",
              "version": "7f0cb478703cbeaddfe5c9101c5c73cd975d1073",
              "versionType": "git"
            },
            {
              "lessThan": "af9cb997d13a17029a0d3863e33f4c837e27a8ae",
              "status": "affected",
              "version": "d484d621d40f4a8b8959008802d79bef3609641b",
              "versionType": "git"
            },
            {
              "lessThan": "b2d78c199dfd983638662ace0612d4fade3dbea1",
              "status": "affected",
              "version": "d484d621d40f4a8b8959008802d79bef3609641b",
              "versionType": "git"
            },
            {
              "lessThan": "a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed",
              "status": "affected",
              "version": "d484d621d40f4a8b8959008802d79bef3609641b",
              "versionType": "git"
            },
            {
              "lessThan": "bef46b604732d83f8da29f782868de4d25bf972c",
              "status": "affected",
              "version": "d484d621d40f4a8b8959008802d79bef3609641b",
              "versionType": "git"
            },
            {
              "lessThan": "6.6.157",
              "status": "affected",
              "version": "6.6.142",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/vfs_cache.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.11"
            },
            {
              "lessThan": "6.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()\n\nSee the procedure below:\n\n  ksmbd_launch_ksmbd_durable_scavenger\n    durable_scavenger_running = true\n    server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()\n\n  server_ctrl_handle_reset\n    ksmbd_stop_durable_scavenger\n    kthread_stop(server_conf.dh_task) // invalid pointer"
    }
  ],
  "id": "CVE-2026-90165",
  "lastModified": "2026-09-17T17:17:09.853",
  "metrics": {},
  "published": "2026-09-17T17:17:09.853",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/3f8651f6bb52159c9e23993c77a2b51b9505ad64"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/af9cb997d13a17029a0d3863e33f4c837e27a8ae"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/b2d78c199dfd983638662ace0612d4fade3dbea1"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/bef46b604732d83f8da29f782868de4d25bf972c"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.