CVE-2026-64382
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_open_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.
Weakness
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_open_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.
Affected products
- linux linux_kernel
References
- https://git.kernel.org/stable/c/02bc2896bdc3e29362d6e40d404006944a159c25
- https://git.kernel.org/stable/c/14498ff5ce0f272ce0ef988721413e06b7038972
- https://git.kernel.org/stable/c/3196b5192f246df4272072f61a2f4a3e9967f55d
- https://git.kernel.org/stable/c/b55e182f2324bc6a604c21a47aa6c448f719a532
- https://git.kernel.org/stable/c/ff2d30927bc3bf3c629f0768d2068096e64ef5ce
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.