CVE record · CVE-2026-98450

smb: client: close completed creates on compound wait errors

No CVSS scoreEPSS 0.0018 · 7th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:15 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before da83fed81241b03fd0e7ccf0091b051cf420d8d2 git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before e94370cf2b76e913a997e9a633ab521a45029284 git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before c8c6c7e665af4dba75a02f4c9bad3ae2ce341619 git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before 8afc80156b1d9e2cfd02d42c255305fad95b59fc git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before 2cb07d1a6a30283dbfc809c8036bc1fd103d59fa git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before 224b56b7c02b2bfb1f5bee18d5f56ae6b052be44 git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before 253612499ce9b4cd7bb922fe507ec204bddd9313 git
  • affected e0bba0b8548179b696e86c158ea8f45f2ef6ad14 to before 6c5c547f037bc18f0b8d0b5db5a648f8f630ce85 git
Other versions: unaffected
Linux Linux
  • affected 4.19
  • unaffected before 4.19 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.1.191 to 6.1.*, inclusive semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.113 to 6.12.*, inclusive semver
  • unaffected 6.18.56 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98450
CNA
Linux
Published
18 Oct 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0018, the 7th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.