CVE-2026-90165 PUBLISHED

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

See the procedure below:

ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()

server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 7f0cb478703cbeaddfe5c9101c5c73cd975d1073 to 3f8651f6bb52159c9e23993c77a2b51b9505ad64 (excl.)
  • affected from d484d621d40f4a8b8959008802d79bef3609641b to af9cb997d13a17029a0d3863e33f4c837e27a8ae (excl.)
  • affected from d484d621d40f4a8b8959008802d79bef3609641b to b2d78c199dfd983638662ace0612d4fade3dbea1 (excl.)
  • affected from d484d621d40f4a8b8959008802d79bef3609641b to a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed (excl.)
  • affected from d484d621d40f4a8b8959008802d79bef3609641b to bef46b604732d83f8da29f782868de4d25bf972c (excl.)
  • affected from 6.6.142 to 6.6.157 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.11 is affected
  • unaffected from 0 to 6.11 (excl.)
  • unaffected from 6.6.157 to 6.6.* (incl.)
  • unaffected from 6.12.110 to 6.12.* (incl.)
  • unaffected from 6.18.52 to 6.18.* (incl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References