CVE-2026-90154

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: scope session state changes to bound connections

ksmbd_all_conn_set_status() treats every connection whose transient

binding flag is set as belonging to the target SessionId. A logoff or

session replacement can consequently move an unrelated connection to

NEED_RECONNECT or NEED_SETUP.

Pass the target session itself and select connections using either the

connection-local session xarray or the session's permanent channel list.

Use the same association test while waiting for requests to drain.

Serialize session-wide status changes under request_lock and do not

overwrite EXITING or RELEASING. Protect the shutdown transition with the

same lock so a concurrent session update cannot revive a closing

connection.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References