CVE-2026-90165

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90165
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90165.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90165
Downstream
Published
2026-09-17T16:06:55Z
Modified
2026-09-19T03:47:25Z
Summary
smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
Details

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

See the procedure below:

ksmbd_launch_ksmbd_durable_scavenger durable_scavenger_running = true server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()

server_ctrl_handle_reset ksmbd_stop_durable_scavenger kthread_stop(server_conf.dh_task) // invalid pointer

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90165.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
7f0cb478703cbeaddfe5c9101c5c73cd975d1073
Fixed
3f8651f6bb52159c9e23993c77a2b51b9505ad64
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d484d621d40f4a8b8959008802d79bef3609641b
Fixed
af9cb997d13a17029a0d3863e33f4c837e27a8ae
Fixed
b2d78c199dfd983638662ace0612d4fade3dbea1
Fixed
a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed
Fixed
bef46b604732d83f8da29f782868de4d25bf972c
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.6.142
Fixed
6.6.157

Affected versions

v6.*
v6.6.142
v6.6.143
v6.6.144
v6.6.145
v6.6.146
v6.6.147
v6.6.148
v6.6.149
v6.6.150
v6.6.151
v6.6.152
v6.6.153
v6.6.154
v6.6.155
v6.6.156

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90165.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.18.52
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90165.json"