PT-2026-43791 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-45924

Mitre

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: call ksmbd vfs kern path end removing() on some error paths

There are two places where ksmbd vfs kern path end removing() needs to be called in order to balance what the corresponding successful call to ksmbd vfs kern path start removing() has done, i.e. drop inode locks and put the taken references. Otherwise there might be potential deadlocks and unbalanced locks which are caught like:

BUG: workqueue leaked lock or atomic: kworker/5:21/0x00000000/7596 last function: handle ksmbd work 2 locks held by kworker/5:21/7596: #0: ffff8881051ae448 (sb writers#3){.+.+}-{0:0}, at: ksmbd vfs kern path locked+0x142/0x660 #1: ffff888130e966c0 (&type->i mutex dir key#3/1){+.+.}-{4:4}, at: ksmbd vfs kern path locked+0x17d/0x660 CPU: 5 PID: 7596 Comm: kworker/5:21 Not tainted 6.1.162-00456-gc29b353f383b #138 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-debian-1.17.0-1 04/01/2014 Workqueue: ksmbd-io handle ksmbd work Call Trace: dump stack lvl+0x44/0x5b process one work.cold+0x57/0x5c worker thread+0x82/0x600 kthread+0x153/0x190 ret from fork+0x22/0x30

Found by Linux Verification Center (linuxtesting.org).

Related Identifiers

CVE-2026-45924

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-45924 · Security Note
• https://git.kernel.org/stable/c/34d6691933682f0516259a31b39d2cebcedec0a5 · Note
• https://git.kernel.org/stable/c/0c578e8065c4b08d5635a4cbc0f6321df9d20f79 · Note
• https://git.kernel.org/stable/c/a09dc10d1353f0e92c21eae2a79af1c2b1ddcde8 · Note
• https://git.kernel.org/stable/c/8e3a3192ef78d8302916408d62813b1fddfc8972 · Note
• https://git.kernel.org/stable/c/f221baa80e5959a0c08a7e34abbf2a4d3cf0e1c2 · Note
• https://git.kernel.org/stable/c/cf29329a13df79c198b45dfc92577638d30b56fa · Note
• https://git.kernel.org/stable/c/4c38600feb81c670edb82e49d201d3d2d00cd4c3 · Note