CVE-2026-64382

8.8 Élevée

Publiée le 25/07/2026 à 12:17 · Modifiée le 19/10/2026 à 23:17 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_open() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_open_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.8 Élevée	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-415

Références

https://git.kernel.org/stable/c/02bc2896bdc3e29362d6e40d404006944a159c25 Patch
https://git.kernel.org/stable/c/14498ff5ce0f272ce0ef988721413e06b7038972 Patch
https://git.kernel.org/stable/c/3196b5192f246df4272072f61a2f4a3e9967f55d Patch
https://git.kernel.org/stable/c/b55e182f2324bc6a604c21a47aa6c448f719a532 Patch
https://git.kernel.org/stable/c/ff2d30927bc3bf3c629f0768d2068096e64ef5ce Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories