Log in Start free

Vulnerability · Published Sep 17, 2026 · Assigned by Linux

CVE-2026-90169ksmbd: free preauth sessions on connection teardown

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 83.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: free preauth sessions on connection teardown SMB3.1.1 multichannel binding preserves the preauthentication hash in a preauth_session between the NTLM negotiate and authenticate requests. The binding NTLM negotiate allocates this object and returns STATUS_MORE_PROCESSING_REQUIRED. If the client disconnects before it sends the authenticate request, neither the authenticate nor error cleanup paths free the object. Release any remaining preauthentication sessions when tearing down the connection. Initialize the list when allocating the connection so that this cleanup is safe regardless of the negotiated dialect.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-90169
Debian:13linux6.12.111-1DEBIAN-CVE-2026-90169
Debian:14linux7.2.6-1DEBIAN-CVE-2026-90169
Debian:12linux-6.126.12.111-1~deb12u1DEBIAN-CVE-2026-90169
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux7.0.0-42.42UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-aws7.0.0-1016.17UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-gcp7.0.0-1016.18UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-42.42~24.04.1UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-ibm7.0.0-1017.17UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1017.17UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-oracle7.0.0-1015.16UBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-90169
Ubuntu:26.04:LTSlinux-riscv7.0.0-42.42.1UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-42.42.1~24.04.1UBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-90169
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-90169
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-90169

Affected products (as reported)

VendorProductVersions
Linux Linux f5a544e3bab78142207e0242d22442db85ba1eff – before 1f60a88b2e0203e50f65b0fb9c32ecb0ae0aa683f5a544e3bab78142207e0242d22442db85ba1eff – before effcf48d79d8aa53113d8289e140746f25ceb62cf5a544e3bab78142207e0242d22442db85ba1eff – before b62b1ebb25f0a19067ed5b1a86036b2dc98be44ff5a544e3bab78142207e0242d22442db85ba1eff – before a41a98ee16ae038751b6639decadaa3ce15ca18af5a544e3bab78142207e0242d22442db85ba1eff – before 8e2ebc77678832e981adc008d25cd8f67d08ebc4f5a544e3bab78142207e0242d22442db85ba1eff – before 06c7b1d731bc105a8644f1b70165ba8b9416cbab
Linux Linux 5.15

References