In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

See the procedure below:

ksmbd_launch_ksmbd_durable_scavenger
durable_scavenger_running = true
server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()

server_ctrl_handle_reset
ksmbd_stop_durable_scavenger
kthread_stop(server_conf.dh_task) // invalid pointer

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7f0cb478703cbeaddfe5c9101c5c73cd975d1073 affected < 3f8651f6bb52159c9e23993c77a2b51b9505ad64
d484d621d40f4a8b8959008802d79bef3609641b affected < af9cb997d13a17029a0d3863e33f4c837e27a8ae
d484d621d40f4a8b8959008802d79bef3609641b affected < b2d78c199dfd983638662ace0612d4fade3dbea1
d484d621d40f4a8b8959008802d79bef3609641b affected < a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed
d484d621d40f4a8b8959008802d79bef3609641b affected < bef46b604732d83f8da29f782868de4d25bf972c
6.6.142 affected < 6.6.157
Linux Linux affected
Version Status Constraints
6.11 affected —
0 unaffected < 6.11
6.6.157 unaffected ≤ 6.6.*
6.12.110 unaffected ≤ 6.12.*
6.18.52 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/3f8651f6bb52159c9e23993c77a2b51b9505ad64 cve-icon cve-icon
https://git.kernel.org/stable/c/a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed cve-icon cve-icon
https://git.kernel.org/stable/c/af9cb997d13a17029a0d3863e33f4c837e27a8ae cve-icon cve-icon
https://git.kernel.org/stable/c/b2d78c199dfd983638662ace0612d4fade3dbea1 cve-icon cve-icon
https://git.kernel.org/stable/c/bef46b604732d83f8da29f782868de4d25bf972c cve-icon cve-icon
History

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger() See the procedure below: ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR() server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer
Title smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-17T16:06:55.196Z

Reserved: 2026-09-11T19:38:34.790Z

Link: CVE-2026-90165

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-17T17:17:09.853

Modified: 2026-09-17T17:17:09.853

Link: CVE-2026-90165

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.