9.8

CVE-2026-64386

smb: client: fix query_info() replay double-free

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix query_info() replay double-free

A response-bearing attempt can return a replayable error and free its
response buffer. If SMB2_query_info_init() fails before the next send,
cleanup retains the previous buffer type and frees that response again.

Reset response bookkeeping before each attempt to prevent the stale free.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 433042a91f9373241307725b52de573933ffedbf
Version < 100fb7c455fa86d248b8bd7bb9de757c192870b4
Status affected
Version 4f1fffa2376922f3d1d506e49c0fd445b023a28e
Version < 3c81dda84799f76b42aec598564316e2964440db
Status affected
Version 4f1fffa2376922f3d1d506e49c0fd445b023a28e
Version < f1add4acb656f5a82806a1ab0e63fed3d8b1bfca
Status affected
Version 4f1fffa2376922f3d1d506e49c0fd445b023a28e
Version < 89234773e8348918111aa15f6922b58cf3843364
Status affected
Version 4f1fffa2376922f3d1d506e49c0fd445b023a28e
Version < 2a88561d66eb855813cf004a0abe648bbb17de5e
Status affected
Version 6.6.32
Version < 6.6.145
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.8
Status affected
Version 0
Version < 6.8
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.96
Status unaffected
Version <= 6.18.*
Version 6.18.39
Status unaffected
Version <= 7.1.*
Version 7.1.4
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.372
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/100fb7c455fa86d248b8bd7bb9de757c192870b4
https://git.kernel.org/stable/c/3c81dda84799f76b42aec598564316e2964440db
https://git.kernel.org/stable/c/f1add4acb656f5a82806a1ab0e63fed3d8b1bfca
https://git.kernel.org/stable/c/89234773e8348918111aa15f6922b58cf3843364
https://git.kernel.org/stable/c/2a88561d66eb855813cf004a0abe648bbb17de5e