CVE-2026-43239
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces() It was possible for two query interface works to be concurrently trying to update the interfaces. Prevent this by checking and updating iface_last_update under iface_lock.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2026-43239
Vendor advisory: suse — https://www.suse.com/security/cve/CVE-2026-43239.html
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/c3c06e42e1527716c54f3ad2ced6a034b5f3a489
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/ab6564f416a6eaf1199200b6100952407b438f7d
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/93e8e3ee165ae4609a1222b516b573837103d2c3
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/76cc4faba0343c6db945b8dc75425b33d633e1b8
Vendor advisory: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 — https://git.kernel.org/stable/c/6287eefaf21ec805d42f941bd368018cf397a7f5
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| sles | affected | | |
| debian | bookworm | affected | |
| debian | bullseye | fixed | 0 |
| debian | forky | fixed | 6.19.6-1 |
| debian | sid | fixed | 6.19.6-1 |
| debian | trixie | fixed | 6.12.85-1 |
| linux-kernel | affected | 6.6.128 | |
| linux-kernel | 5.19 | affected | |
References
- https://git.kernel.org/stable/c/6287eefaf21ec805d42f941bd368018cf397a7f5
- https://git.kernel.org/stable/c/76cc4faba0343c6db945b8dc75425b33d633e1b8
- https://git.kernel.org/stable/c/93e8e3ee165ae4609a1222b516b573837103d2c3
- https://git.kernel.org/stable/c/ab6564f416a6eaf1199200b6100952407b438f7d
- https://git.kernel.org/stable/c/c3c06e42e1527716c54f3ad2ced6a034b5f3a489
- https://www.suse.com/security/cve/CVE-2026-43239.html
- https://security-tracker.debian.org/tracker/CVE-2026-43239
Verify integrity in audit chain (admin only). AS-IS.