Impact
The Linux kernel’s CIFS implementation holds a read lock while waiting for a lease break acknowledgement, causing a 35‑second timeout when a conflicting open arrives. The bug leads to a race condition where the lock prevents the lease break from being acknowledged promptly, resulting in prolonged blocking for client operations and no direct code execution is possible. The kernel code uses the lock to protect shared structures, but the waiting thread blocks other threads from completing the lease break, producing a denial‑of‑service effect for SMB clients that rely on fast lease management.
Affected Systems
This issue affects the Linux kernel on all vendor distributions that ship the CIFS SMB client (cifs.ko). No specific kernel version is listed in the data, so any system that uses the default CIFS driver before the applied patch may be impacted.
Risk and Exploitability
The EPSS score is not provided and the vulnerability is not listed in CISA KEV, indicating limited awareness or exploitation data. Nevertheless, the 35‑second wait can be triggered by normal SMB traffic if a lease conflict occurs, leading to performance degradation or temporary denial of service. The issue is a race condition that could be aggravated by high load or scripted lease break requests, but it does not grant remote code execution or privilege escalation.
OpenCVE Enrichment