CVE-2026-97562

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the SMB client where tcon super cb() stores a raw superblock pointer. Because cifs get super() only takes an active reference after iterate supers type() has dropped s umount and its passive reference, a concurrent DFS automount expiry can free the superblock before cifs sb active() uses it. This leads to a slab-use-after-free, which is a situation where the system attempts to access memory that has already been marked as free. The issue was identified using KASAN (Kernel Address Sanitizer), a tool used to detect memory errors in the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.