{"cve":"CVE-2026-98452","nvd":{"published":"2026-10-18T16:16:55.537","modified":"2026-10-19T10:18:54.437","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: clean up failed cached directory opens\n\nopen_cached_dir() sends CREATE and QUERY_INFO as a compound request. If\nthe CREATE succeeds but a later command returns an error, the function\nmust retain the CREATE FID so common cleanup can issue SMB2_close(). It\nalso must not treat a response error as a valid CREATE.\n\nValidate the CREATE response before using its fields, record the FIDs, and\nmark the handle open before handling errors from later compound commands.\nMove the -EREMCHG reconnect handling before response validation so a\nmissing response does not hide the reconnect request. Count the handle\nwhen it is marked open; confirmed close responses decrement the counter,\nwhile existing close retry behavior remains best effort on transport\nfailures.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/48958ddda3d7eee3600261e2d90671f63e055dc4","https://git.kernel.org/stable/c/7c1509598a4fdfb54cb09ce33e4405bd6dbd8295","https://git.kernel.org/stable/c/abab661eed00fa102d3c35ddf1cce4f687e718c1","https://git.kernel.org/stable/c/d2ff5fb93ea83034025850266b5eed391f96b825"],"products":[],"source":"nvd","synced_at":"2026-10-19T23:00:53.604569364+00:00"},"epss":{"cve":"CVE-2026-98452","score":0.00175,"percentile":0.06997,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}