{"metadata": {"vulnerability": "CVE-2026-98897", "count": 18, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-09-25T10:25:14.379Z", "date_only": false, "value": "2026-09-25T10:25:14.379Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-98897", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T11:54:05.872Z", "date_only": false, "value": "2026-10-23T11:54:05.872Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-98897", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-23T12:18:23Z", "date_only": false, "value": "2026-10-23T12:18:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-83J5-G9M2-9MF4", "record": "GHSA-83J5-G9M2-9MF4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T12:18:23.670Z", "date_only": false, "value": "2026-10-23T12:18:23.670", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98897", "record": "FKIE_CVE-2026-98897", "field": "published"}, {"timestamp": "2026-10-23T12:20:06.227Z", "date_only": false, "value": "2026-10-23T12:20:06.227063Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117490188663837014", "record": "CVE-2026-98897", "field": "creation_timestamp", "uuid": "9c472f2f-7356-4606-8a59-53993085db98", "content": "CVE-2026-98897 ksmbd: don't hold ci->m_lock while waiting for a lease break ack In the Linux kernel, the following vulnerability has been resolved:\nksmbd: don't hold ci->m_lock while waiting for a lease break ack\nWhen a cifs.ko client caches a read-handle (RH) lease via deferred closeand a conflicting open arrives, ksmbd breaks the lease and waits for theacknowledgment in wait_for_break_ack() for up to OPLOCK_WAIT_TIME (35s).__smb_break_all_levII_oplock() runs that wait while holding ci->m_lockfor read.\ncifs.ko reacts to a handle-lease break by closing the deferred handlerather than sending a lease break acknowledgment. That close path(close_id_del_oplock() -> opinfo_del()) takes ci->m_lock for write andis exactly what would wake the waiter, but it blocks on the read lockheld by the waiting thread. The break is then resolved only by the 35stimeout, so xfstests generic/001 takes ~78s with leases enabled versus~4s with oplocks only.\nCollect the target opinfos (each pinned with a reference) while holdingci->m_lock, then break them after releasing it, matching howsmb_grant_oplock() already breaks a conflicting lease using only areference.  The reference keeps the opinfo (and its conn and lease)alive across the unlocked window, and a close racing the break ishandled by the existing OPLOCK_CLOSING state check. Apply the same fixto the parent lease break paths.\nhttps://www.cve.org/CVERecord?id=CVE-2026-98897https://git.kernel.org/stable/c/868c9038ffd4af39766d087f68c8f543a3f66635https://git.kernel.org/stable/c/27a9bc968d4ae809a3f5ca2f2b136856ee613cb4#kernel #Linux#CVE_2026_98897#bot", "url": "https://infosec.exchange/users/cve/statuses/117490188663837014"}, {"timestamp": "2026-10-23T12:31:37Z", "date_only": false, "value": "2026-10-23T12:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-83J5-G9M2-9MF4", "record": "GHSA-83J5-G9M2-9MF4", "field": "published"}, {"timestamp": "2026-10-23T12:31:37Z", "date_only": false, "value": "2026-10-23T12:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-83J5-G9M2-9MF4", "record": "GHSA-83J5-G9M2-9MF4", "field": "modified"}, {"timestamp": "2026-10-24T01:02:13Z", "date_only": false, "value": "2026-10-24T01:02:13.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-24T01:02:13Z", "date_only": false, "value": "2026-10-24T01:02:13.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-24T01:02:13Z", "date_only": false, "value": "2026-10-24T01:02:13.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-24T01:05:37Z", "date_only": false, "value": "2026-10-24T01:05:37.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-24T01:05:37Z", "date_only": false, "value": "2026-10-24T01:05:37.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-24T07:00:42.695Z", "date_only": false, "value": "2026-10-24T07:00:42.695Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-98897", "record": "MSRC_CVE-2026-98897", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98897", "record": "UBUNTU-CVE-2026-98897", "field": "published"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2026-98897", "record": "UBUNTU-CVE-2026-98897", "field": "modified"}, {"timestamp": "2026-10-26T06:56:24.210Z", "date_only": false, "value": "2026-10-26T06:56:24.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-98897", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-26T06:56:24.210Z", "date_only": false, "value": "2026-10-26T06:56:24.210Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Linux", "record": "CVE-2026-98897", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-26T07:17:14.980Z", "date_only": false, "value": "2026-10-26T07:17:14.980", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-98897", "record": "FKIE_CVE-2026-98897", "field": "lastModified"}]}