AZL-108876
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108876.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108876
- Upstream
- Published
- 2026-10-18T16:16:55Z
- Modified
- 2026-10-20T05:35:13Z
- Summary
- CVE-2026-98453 affecting package kernel 6.6.157.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb: client: close handle after create-context parsing failure
SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated.
Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.
- References