CVE-2026-64386

9.8 Critique

Publiée le 25/07/2026 à 12:17 · Modifiée le 19/10/2026 à 23:17 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_info() replay double-free A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_query_info_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	416baaa9-dc9f-4396-8d5f-8c081fb06d67	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-415

Références

https://git.kernel.org/stable/c/100fb7c455fa86d248b8bd7bb9de757c192870b4 Patch
https://git.kernel.org/stable/c/2a88561d66eb855813cf004a0abe648bbb17de5e Patch
https://git.kernel.org/stable/c/3c81dda84799f76b42aec598564316e2964440db Patch
https://git.kernel.org/stable/c/89234773e8348918111aa15f6922b58cf3843364 Patch
https://git.kernel.org/stable/c/f1add4acb656f5a82806a1ab0e63fed3d8b1bfca Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories