CVE-2026-98453

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated. Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.

Is your site exposed to CVE-2026-98453?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0018

Probability of exploitation

0.07%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/566820af017e81497fb5e9d3ad6e7ffe2828bc8b https://git.kernel.org/stable/c/80c67cc71d32ccafc89a29b669243b40d81b930f https://git.kernel.org/stable/c/cdb36b09fb1f86d638d0afb44d621ed3f7c1d8eb https://git.kernel.org/stable/c/eaa97a196a107d4ef8775df2248181624151812e https://git.kernel.org/stable/c/f09875ff901e933e7b22c913daf51d21e9d93a45

Frequently Asked Questions

What is CVE-2026-98453? +

In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE response as a remote open before parsing its create contexts. If smb2_parse_contexts() rejects malformed context data, SMB2_open() returns without closing the handle, leaving the server-side handle open and num_remote_opens elevated. Close the handle after a post-CREATE context parsing failure so the error path releases the remote resource and balances the open count.

How do I check if I'm vulnerable to CVE-2026-98453? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.