---
id: CVE-2026-90165
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

  See the procedure below:

    ksmbd_launch_ksmbd_durable_scavenger
      durable_scavenger_ru…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

  See the procedure below:

    ksmbd_launch_ksmbd_durable_scavenger
      durable_scavenger_ru…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 7f0cb478703cbeaddfe5c9101c5c73cd975d1073 <
    3f8651f6bb52159c9e23993c77a2b51b9505ad64
  - >-
    Linux >= d484d621d40f4a8b8959008802d79bef3609641b <
    af9cb997d13a17029a0d3863e33f4c837e27a8ae
  - >-
    Linux >= d484d621d40f4a8b8959008802d79bef3609641b <
    b2d78c199dfd983638662ace0612d4fade3dbea1
  - >-
    Linux >= d484d621d40f4a8b8959008802d79bef3609641b <
    a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed
  - >-
    Linux >= d484d621d40f4a8b8959008802d79bef3609641b <
    bef46b604732d83f8da29f782868de4d25bf972c
  - Linux >= 6.6.142 < 6.6.157
  - Linux 6.11
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:09.853'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90165'
references:
  - url: 'https://git.kernel.org/stable/c/3f8651f6bb52159c9e23993c77a2b51b9505ad64'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a2eb72b4d53bb9d8d6c00f3f794eaccb4b1ce5ed'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/af9cb997d13a17029a0d3863e33f4c837e27a8ae'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b2d78c199dfd983638662ace0612d4fade3dbea1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bef46b604732d83f8da29f782868de4d25bf972c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.871Z'
epss: 0.002
epssPercentile: 0.10119
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()

See the procedure below:

  ksmbd_launch_ksmbd_durable_scavenger
    durable_scavenger_running = true
    server_conf.dh_task = kthread_run() // fail, dh_task is an ERR_PTR()

  server_ctrl_handle_reset
    ksmbd_stop_durable_scavenger
    kthread_stop(server_conf.dh_task) // invalid pointer

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.