CVE-2026-98439

{
  "etk_id": "ETK-2026-2140",
  "cve_id": "CVE-2026-98439",
  "display_id": "CVE-2026-98439",
  "ghsa_id": "GHSA-xm6x-r8m7-4r79",
  "euvd_id": "EUVD-2026-103678",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Connection-close denial of service in Linux ksmbd",
  "summary": "Linux kernel systems using the ksmbd in-kernel SMB server are affected when an SMB connection closes while an asynchronous request remains pending. An attacker able to interact with the service may cause affected connections to remain open rather than close normally.",
  "mitigation": "Update to Linux kernel version 7.2.7 or a vendor kernel that includes one of the listed fixed commits. Until updated, restrict ksmbd SMB service access to trusted networks and clients.",
  "vendor": "Linux",
  "product": "Linux",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0947087678f465b64eba2acebe808d5c6cfea036",
        ">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851",
        ">= 0, < 7.2.7"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "0947087678f465b64eba2acebe808d5c6cfea036",
        "4fd5bad647bfa45eb86bfd2f03ba1bef3fcd5851",
        "7.2.7"
      ],
      "package_name": "Linux",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Linux",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": 0.0015,
  "epss_percentile": 0.0338,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 71.995316,
  "t0_at": "2026-10-18T14:45:28.290000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-18T14:45:28.290000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-18T14:45:28.290000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-98439"
    }
  }
}