UBUNTU-CVE-2026-98439: High severity ubuntu/linux vulnerability
In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connection is closed. This can stop the connection from closing. Cancel active async requests before waiting for them to finish.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Compensating control
For Linux kernel SMB server connections, cancel active asynchronous requests when closing the connection before waiting for them to finish.
Event History
Frequently Asked Questions
Which systems are affected?
The affected software list includes Ubuntu linux, linux-fips, linux-aws, linux-azure, linux-gcp, linux-aws-fips, linux-azure-fips, and linux-gcp-fips kernel packages.
What access does an attacker need to exploit this issue?
The severity vector indicates network attack access, low attack complexity, no user interaction, and low privileges required. The reported impact is limited to availability.
What behavior indicates a system may be affected?
An SMB server connection may fail to close when an asynchronous request remains pending. The condition occurs because the connection waits for active asynchronous requests rather than cancelling them first.