CVE record · CVE-2026-97557

smb: client: avoid leaking refcount in cifs_queue_oplock_break()

CVSS 7.5 HighEPSS 0.0070 · 53rd percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:21 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected b98749cac4a695f084a5ff076f4510b23e353ecd to before 13b9519b19e6e58a6cd01e63062cd1da7bd6449a git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before 0fb92ac85db58945ad7b970ff17674001487b3a3 git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before 735a3a610136ae10f381d0909dff38e5b5c5f056 git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before de2a6bcff2659bea40c7485115b57f0ae189fc01 git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before af0193bbf1ac8c0f67f972998b0cc629d6116cf6 git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before 2ed2c29dd9593637cfa25ac1eb23241b20202778 git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before dfe7b750c7e069873a8a57a11c816831a235618a git affected b98749cac4a695f084a5ff076f4510b23e353ecd to before 9f2e63f1b2d5fc5b5423424902c091123e220e7e git affected 2429fcf06d3cb962693868ab0a927c9038f12a2d git affected 1ee4f2d7cdcd4508cc3cbe3b2622d7177b89da12 git affected 53fc31a4853e30d6e8f142b824f724da27ff3e40 git affected 8092ecc306d81186a64cda42411121f4d35aaff4 git and 6 more Other versions: unaffected
Linux	Linux	affected 5.1 unaffected before 5.1 semver unaffected 5.10.273 to 5.10., inclusive semver unaffected 5.15.224 to 5.15., inclusive semver unaffected 6.1.189 to 6.1., inclusive semver unaffected 6.6.158 to 6.6., inclusive semver unaffected 6.12.111 to 6.12., inclusive semver unaffected 6.18.53 to 6.18., inclusive semver unaffected 7.2.7 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-97557
CNA: Linux
Tags: Linux kernel
Published: 25 Sept 2026
Updated: 30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.5	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CNA (Linux)

CISA KEV Not listed.
EPSS 0.0070, the 53rd percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.