CVE-2026-23205
Severity
5.5MEDIUM
EPSS
0.0%
top 94.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Description
In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix memory leak in smb2_open_file()
Reproducer:
1. server: directories are exported read-only
2. client: mount -t cifs //${server_ip}/export /mnt
3. client: dd if=/dev/zero of=/mnt/file bs=512 count=1000 oflag=direct
4. client: umount /mnt
5. client: sleep 1
6. client: modprobe -r cifs
The error message is as follows:
BUG cifs_small_rq (Not tainted): Objects remaining on __kmem_cache_shutdown()
Object 0x0000000…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linux17e53a15e64b65623b8f2b1185d27d7b1cbf69ab — 743f70406264348c0830f38409eb6c40a42fb2db+6
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-9rcv-5g2j-597r: In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix memory leak in smb2_open_file()
Reproducer:
1↗2026-02-14
OSV▶
CVE-2026-23205: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix memory leak in smb2_open_file() Reproducer: 1↗2026-02-14