{"id":"CVE-2026-98112","published":"2026-09-25T11:17:42.340","lastModified":"2026-09-25T15:18:06.070","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix listener task lifetime on netdev events\n\nThe listener thread exits when its listening socket is shutdown. The\nnetdevice notifier shuts down the socket before calling kthread_stop(), so\nthe task_struct can be freed before kthread_stop() gets its reference.\n\nCreate the listener in a stopped state and hold an extra task_struct\nreference until kthread_stop_put() completes. Also stop and release\nlisteners before freeing their interface records during TCP teardown.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/40581f10c1e56238b157af5f260b8f9518a0cbc1","tags":[]},{"url":"https://git.kernel.org/stable/c/a506290f59e1c6ce9ac0a13158640bb8fee93471","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}