CVE-2026-23230
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
smb: client: split cached_fid bitfields to avoid shared-byte RMW races
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cached_fid bitfields to avoid shared-byte RMW races is_open, has_lease and on_list are stored in the same bitfield byte in struct cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments generate byte read–modify–write operations (e.g. `orb $mask, addr` on x86_64), so updating one flag can restore stale values of the others. A possible interleaving is: CPU1: load old byte (has_lease=1, on_list=1) CPU2: clear both flags (store 0) CPU1: RMW store (old | IS_OPEN) -> reintroduces cleared bits To avoid this class of races, convert these flags to separate bool fields.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | 569fecc56bfe4df66f05734d67daef887746656b | Unavailable | None listed |
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | 4386f6af8aaedd0c5ad6f659b40cadcc8f423828 | Unavailable | None listed |
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | 3eaa22d688311c708b73f3c68bc6d0c8e3f0f77a | Unavailable | None listed |
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | c4b9edd55987384a1f201d3d07ff71e448d79c1b | Unavailable | None listed |
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | 4cfa4c37dcbcfd70866e856200ed8a2894cac578 | Unavailable | None listed |
| ebe98f1447bbccf8228335c62d86af02a0ed23f7 | affected | git | ec306600d5ba7148c9dbf8f5a8f1f5c1a044a241 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 6.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 6.1 | Unavailable | None listed |
| 6.1.164 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.125 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.72 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.11 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19.1 | unaffected | semver | Unavailable | 6.19.* | None listed |
| 7.0 | unaffected | original_commit_for_fix | Unavailable | * | None listed |