Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-98420

ksmbd: follow SMB2 session expiration semantics

No CVSS scoreEPSS 0.0024 · 14th percentile

Published by the CVE Program (CNA: Linux) at 14 Oct 2026, 13:27 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected ea174a91893956450510945a0c5d1a10b5323656 to before c99ea7855124ca1428a1e59c2b4590aaef34eacf git
  • affected ea174a91893956450510945a0c5d1a10b5323656 to before d7fd1f98607f2cd358e583f9548bdf0173090a86 git
  • affected a6a9601ba995d0fec635324cb9fd8d14f9bea14e git
  • affected 1fc8a2b14ef5223f8e0b95faba2ee0a6e4d0f99d git
  • affected 750a2d772e9d9ff377fd32e3b6797bf2cd847a7a git
  • affected 6775ee7ef4b37c521aa4cf3730f54554c4875542 git
  • affected 5.15.145 to before 5.16 semver
  • affected 6.1.29 to before 6.2 semver
  • affected 6.2.16 to before 6.3 semver
  • affected 6.3.2 to before 6.4 semver
Other versions: unaffected
Linux Linux
  • affected 6.4
  • unaffected before 6.4 semver
  • unaffected 7.2.8 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98420
CNA
Linux
Tags
Published
14 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0024, the 14th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 14 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.