CVE-2026-98901

Source
https://cve.org/CVERecord?id=CVE-2026-98901
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98901.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98901
Downstream
Published
2026-10-23T11:54:11Z
Modified
2026-10-28T02:31:05Z
Summary
ksmbd: fix lease break and ack state handling
Details

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix lease break and ack state handling

Do not skip valid lease states containing WRITE_CACHING when breaking level-II/read leases for writes and truncates.

Handle lease break acknowledgments according to the SMB2 rule that the acknowledged state must be a subset of the server's break target. Apply the acknowledged state directly and keep the break pending on failed ACKs.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98901.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9
Fixed
17699905a381621c1cee5b6528feb05acedc86a4
Fixed
3251ea36df5eef58aa207fbee48849d89b922ea6
Fixed
fba4653a0b4dc2f6d42600abe21fb326292f70ff
Fixed
5015191096db311759fef98769270336cd8b1324

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98901.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98901.json"