Answer in brief
CVE-2026-98451 records a High severity (CVSS 8.8) vulnerability in smb: client: use finish_no_open() for non-regular inodes. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 8.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <ed03d547598c92a036f20e89156540995cac889a || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <70a7918fda54a06d836acc91eb9a3c7e860fe0a0 || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <3c07deb26273155c180aedfd9041ab58015d2521 || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <e66cf1625ec4a3fe68346119f371def713fd0a4d | ed03d547598c92a036f20e89156540995cac889a, 70a7918fda54a06d836acc91eb9a3c7e860fe0a0, 3c07deb26273155c180aedfd9041ab58015d2521, e66cf1625ec4a3fe68346119f371def713fd0a4d |
| Linux/Linuxgeneric | 3.6 | Not reported |
| Linux/Linuxgeneric | >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <045532f920d86dd76600b635f9756e5fd671ddfc || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <ed03d547598c92a036f20e89156540995cac889a || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <70a7918fda54a06d836acc91eb9a3c7e860fe0a0 || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <3c07deb26273155c180aedfd9041ab58015d2521 || >=d2c127197dfc0b2bae62a52e1e0d3e3ff493919e <e66cf1625ec4a3fe68346119f371def713fd0a4d | 045532f920d86dd76600b635f9756e5fd671ddfc, ed03d547598c92a036f20e89156540995cac889a, 70a7918fda54a06d836acc91eb9a3c7e860fe0a0, 3c07deb26273155c180aedfd9041ab58015d2521, e66cf1625ec4a3fe68346119f371def713fd0a4d |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 24, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find an existing symlink or another non-regular inode. cifs_atomic_open() calls finish_open() on it and attaches a cifsFileInfo. Symlink inodes have no CIFS release operation, so the dentry reference held by cifsFileInfo is leaked. FMODE_OPENED also prevents the VFS from following the symlink. Track whether cifs_do_create() returned an open server handle. For non-regular inodes, close the handle if present, remove the pending open, and call finish_no_open() so the VFS can continue the lookup. Do not set FMODE_CREATED unless a regular file was opened. For O_NOFOLLOW with __O_REGULAR, return -ELOOP before the VFS's -EFTYPE check. Defer closing a legacy POSIX handle on a non-regular inode until after inode lookup. This avoids closing it again if lookup fails.
Quoted source text, attributed separately from HOL analysis.