In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix memory leak in smb2openfile()
Reproducer:
The error message is as follows:
============================================================================= BUG cifssmallrq (Not tainted): Objects remaining on _kmemcache_shutdown()
Object 0x00000000d47521be @offset=14336 ... WARNING: mm/slub.c:1251 at _kmemcacheshutdown+0x34e/0x440, CPU#0: modprobe/1577 ... Call Trace: <TASK> kmemcachedestroy+0x94/0x190 cifsdestroyrequestbufs+0x3e/0x50 [cifs] cleanupmodule+0x4e/0x540 [cifs] _sesysdeletemodule+0x278/0x400 _x64sysdeletemodule+0x5f/0x70 x64syscall+0x2299/0x2ff0 dosyscall64+0x89/0x350 entrySYSCALL64afterhwframe+0x76/0x7e ... kmemcachedestroy cifssmallrq: Slab cache still has objects when called from cifsdestroyrequestbufs+0x3e/0x50 [cifs] WARNING: mm/slabcommon.c:532 at kmemcache_destroy+0x16b/0x190, CPU#0: modprobe/1577
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23205.json",
"cna_assigner": "Linux"
}