CVE-2026-90165
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-90165, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
See the procedure below:
ksmbd_launch_ksmbd_durable_scavenger
durable_scavenger_running = true
server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()
server_ctrl_handle_reset
ksmbd_stop_durable_scavenger
kthread_stop(server_conf.dh_task) // invalid pointer
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 7f0cb478703cbeaddfe5c9101c5c73cd975d1073 |
| Linux | Linux | d484d621d40f4a8b8959008802d79bef3609641b |
| Linux | Linux | d484d621d40f4a8b8959008802d79bef3609641b |
| Linux | Linux | d484d621d40f4a8b8959008802d79bef3609641b |
| Linux | Linux | d484d621d40f4a8b8959008802d79bef3609641b |
| Linux | Linux | 6.6.142 |
| Linux | Linux | 6.11 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |