CVE-2026-90163: smb/server: call ksmbd_proc_cleanup() on module init failure
In the Linux kernel, the following vulnerability has been resolved:
smb/server: call ksmbdproccleanup() on module init failure
When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister(). Returning an error from moduleinit() leaves the proc tree and its per-CPU counters allocated.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
When can this issue occur?
It occurs when the ksmbd module is being initialized and a later initializer fails after procfs resources have already been created. The failure path then returns an error from module initialization without releasing those procfs resources and per-CPU counters.
What evidence could indicate that the failed initialization path was taken?
A failed ksmbd module initialization can leave its proc tree and associated per-CPU counters allocated. The provided information does not describe any further externally visible indicator or a specific detection procedure.