CVE-2026-23228: smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
In the Linux kernel, the following vulnerability has been resolved:
smb: server: fix leak of activenumconn in ksmbdtcpnewconnection()
On kthreadrun() failure in ksmbdtcpnewconnection(), the transport is freed via freetransport(), which does not decrement activenumconn, leaking this counter.
Replace freetransport() with ksmbdtcpdisconnect().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In ksmbd_tcp_new_connection(), replace free_transport() with ksmbd_tcp_disconnect() on kthread_run() failure so active_num_conn is decremented.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23228?
CVE-2026-23228 has a moderate severity rating due to the potential for information leakage.
How do I fix CVE-2026-23228?
To resolve CVE-2026-23228, update the Linux kernel to the latest stable version where this vulnerability has been patched.
What systems are affected by CVE-2026-23228?
CVE-2026-23228 affects the Linux kernel implementations that utilize the ksmbd SMB server.
What type of vulnerability is CVE-2026-23228?
CVE-2026-23228 is a resource leak vulnerability in the SMB server component of the Linux kernel.
When was CVE-2026-23228 reported?
CVE-2026-23228 was reported as part of ongoing security updates for the Linux kernel.