Linux Kernel Vulnerability in ksmbd Affecting CI Lock Management

CVE-2026-98897

What is CVE-2026-98897?

The ksmbd component of the Linux kernel has a vulnerability that arises from improper management of locks during lease break acknowledgments. When a cifs.ko client caches a read-handle lease and a conflicting open request is received, ksmbd interrupts the lease but inefficiently manages the wait for an acknowledgment while holding certain locks. This can lead to delays and increased execution time for operations that depend on leasing functionality. The solution involves a refined approach where target opinions are collected without holding the lock, thus improving responsiveness and operational performance.

References