CVE-2026-98453: smb: client: close handle after create-context parsing failure
In the Linux kernel, the following vulnerability has been resolved:
smb: client: close handle after create-context parsing failure
SMB2open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2parsecontexts() rejects malformed context data, SMB2open() returns without closing the handle, leaving the server-side handle open and numremoteopens elevated.
Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
When SMB2_open() encounters a failure parsing CREATE context data via smb2_parse_contexts(), close the handle to release the server-side resource and balance the remote-open count.