CVE-2026-90163: smb/server: call ksmbd_proc_cleanup() on module init failure

Published Sep 17, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

smb/server: call ksmbdproccleanup() on module init failure

When a later initializer fails, the unwind chain releases resources created after procfs and then jumps directly to classunregister(). Returning an error from moduleinit() leaves the proc tree and its per-CPU counters allocated.

Affected Software

1 affected component

Linux Linux kernel

Event History

Sep 17, 2026

CVE Published

via MITRE·04:06 PM

Data Sourced

via MITRE·04:06 PM

Description

Frequently Asked Questions

When can this issue occur?

It occurs when the ksmbd module is being initialized and a later initializer fails after procfs resources have already been created. The failure path then returns an error from module initialization without releasing those procfs resources and per-CPU counters.

What evidence could indicate that the failed initialization path was taken?

A failed ksmbd module initialization can leave its proc tree and associated per-CPU counters allocated. The provided information does not describe any further externally visible indicator or a specific detection procedure.

CVE-2026-90163: smb/server: call ksmbd_proc_cleanup() on module init failure

Affected Software

Event History

Frequently Asked Questions

When can this issue occur?

What evidence could indicate that the failed initialization path was taken?

Company

Resources

Contact

Frequently Asked Questions

When can this issue occur?

What evidence could indicate that the failed initialization path was taken?