CVE-2026-64382

high

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_open_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

References

https://git.kernel.org/stable/c/ff2d30927bc3bf3c629f0768d2068096e64ef5ce

https://git.kernel.org/stable/c/b55e182f2324bc6a604c21a47aa6c448f719a532

https://git.kernel.org/stable/c/3196b5192f246df4272072f61a2f4a3e9967f55d

https://git.kernel.org/stable/c/14498ff5ce0f272ce0ef988721413e06b7038972

https://git.kernel.org/stable/c/02bc2896bdc3e29362d6e40d404006944a159c25

Details

Source: Mitre, NVD

Published: 2026-07-25

Updated: 2026-07-25

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00209