Tree Connection Leak in Linux Kernel Affecting SMB Server

CVE-2026-98162

What is CVE-2026-98162?

The Linux kernel's SMB server has a vulnerability that results in a leak of tree connections. Specifically, the issue arises within the smb2_tree_connect() function where a failure to disconnect a new tree connection occurs if the ksmbd_iov_pin_rsp() function fails. This leak can lead to resource exhaustion and affect server performance, necessitating a patch to ensure proper management and disconnection of tree connections.

References