UBUNTU-CVE-2026-98112: High severity ubuntu/linux-hwe-edge vulnerability
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix listener task lifetime on netdev events The listener thread exits when its listening socket is shutdown. The netdevice notifier shuts down the socket before calling kthreadstop(), so the taskstruct can be freed before kthreadstop() gets its reference. Create the listener in a stopped state and hold an extra taskstruct reference until kthreadstopput() completes. Also stop and release listeners before freeing their interface records during TCP teardown.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
During ksmbd TCP teardown and netdevice-notifier handling, stop and release listeners before freeing their interface records; create each listener in a stopped state and retain an extra task_struct reference until kthread_stop_put() completes.