CVE record · CVE-2026-97556

smb: client: avoid leaking refcount when cifs_sb_tlink() fails

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:21 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected b99f490ea87ebcca3a429fd8837067feb56a4c7c to before f1fd8a84181b3af03c508e0b02b4877945dd070a git affected 5ee28bcfbaacf289eb25c662a2862542ea6ce6a7 to before 55c5f095d4df14271b238f826e1392fda7b6e60e git affected e8f5f849ffce24490eb9449e98312b66c0dba76f to before e9c5bcc88b8337157e480c85a6d2f326bc265012 git affected e8f5f849ffce24490eb9449e98312b66c0dba76f to before 9ec991e148368e3207e98134c509a625097f7693 git affected e8f5f849ffce24490eb9449e98312b66c0dba76f to before dd03fd658ea59821505e0e643b6b7cbdf51c4e1d git affected e8f5f849ffce24490eb9449e98312b66c0dba76f to before 1d1b0f1d812a4011a57bc6c70492c34a2e46c6dd git affected e8f5f849ffce24490eb9449e98312b66c0dba76f to before 23b26f4408ac3f35a482d2e5cf6fc865d4201b71 git affected 6b67a6d2e50634fe127e656147c81915955e9f5e git affected 5.15.128 to before 5.15.224 semver affected 6.1.47 to before 6.1.189 semver affected 6.4.12 to before 6.5 semver Other versions: unaffected
Linux	Linux	affected 6.5 unaffected before 6.5 semver unaffected 5.15.224 to 5.15., inclusive semver unaffected 6.1.189 to 6.1., inclusive semver unaffected 6.6.158 to 6.6., inclusive semver unaffected 6.12.111 to 6.12., inclusive semver unaffected 6.18.53 to 6.18., inclusive semver unaffected 7.2.7 to 7.2., inclusive semver unaffected 7.3 to *, inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-97556
CNA: Linux
Tags: Linux kernel
Published: 25 Sept 2026
Updated: 30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.0021, the 11th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.