CVE-2026-98452 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, SMB client users, system administrators responsible for Linux kernel security, Linux distribution maintainers, and users of Linux-based systems that utilize SMB clients. These parties should assess potential exposure and review Linux kernel patching and update processes to ensure the vulnerability is properly addressed.

Why it matters

This vulnerability affects the Linux kernel SMB client and requires verification of SMB client error handling and FID management. Linux kernel developers and maintainers, SMB client users, and system administrators responsible for Linux kernel security should assess potential exposure and review Linux kernel patching and update processes.

• Verify SMB client error handling and FID management
• Assess potential exposure to SMB client vulnerabilities
• Review Linux kernel patching and update processes

Technical summary

The vulnerability affects the Linux kernel SMB client, specifically in the handling of cached directory opens. A compound request is sent, and if the CREATE command succeeds but a later command returns an error, the function must retain the CREATE FID for proper cleanup. The issue has been addressed with specific code changes to validate the CREATE response, record FIDs, and mark handles as open before handling errors.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the provided Linux kernel patches to address the vulnerability
• Verify the SMB client configuration and ensure proper error handling
• Monitor system logs for potential exploitation attempts
• Perform a thorough review of the Linux kernel patch notes and Git commit hashes
• Assess potential exposure to SMB client vulnerabilities
• Review Linux kernel patching and update processes
• Verify SMB client error handling and FID management

Evidence notes

The CVE record and NVD entry provide details on the vulnerability. However, the CVSS score and severity are not available. The Linux kernel patch notes and Git commit hashes are provided as references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.