CVE-2026-43215: cifs: Fix locking usage for tcon fields
In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix locking usage for tcon fields
We used to use the cifstcpseslock to protect a lot of objects that are not just the server, ses or tcon lists. We later introduced srvlock, seslock and tclock to protect fields within the corresponding structs. This was done to provide a more granular protection and avoid unnecessary serialization.
There were still a couple of uses of cifstcpseslock to provide tcon fields. In this patch, I've replaced them with tclock.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43215?
The severity of CVE-2026-43215 is categorized as moderate due to the risk of improper locking usage affecting synchronization.
How do I fix CVE-2026-43215?
To fix CVE-2026-43215, update your Linux kernel to a version that includes the patch addressing the locking issues.
Which versions of the Linux kernel are affected by CVE-2026-43215?
CVE-2026-43215 affects Linux kernel versions from 6.0 up to 6.6.128, and from 6.7 to 6.12.75, as well as versions from 6.13 to 6.18.16.
Is CVE-2026-43215 exploitable in production environments?
Yes, CVE-2026-43215 can be potentially exploitable in production environments if the affected kernel versions are in use.
What components are impacted by CVE-2026-43215?
CVE-2026-43215 impacts the CIFS (Common Internet File System) locking mechanisms within the Linux kernel.