CVE-2026-64383
Received Received - Intake

BaseFortify

Publication date: 2026-07-25

Last updated on: 2026-07-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time. Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-25
Last Modified
2026-07-25
Generated
2026-07-25
AI Q&A
2026-07-25
EPSS Evaluated
N/A
NVD
CVE-2026-64383
EUVD
EUVD-2026-48927

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a double-free vulnerability in the Linux kernel's SMB client implementation. It occurs in the SMB2_flush() function during replay attempts. When a retry fails after receiving a replayable flush response, the function incorrectly frees a stale response pointer twice, leading to memory corruption.

Detection Guidance

This vulnerability is specific to the Linux kernel's SMB client implementation and may not have direct detection commands. Monitor kernel logs for crashes or errors related to SMB operations, particularly flush operations. Check for double-free errors in system logs after SMB operations.

Impact Analysis

This vulnerability could allow an attacker to cause a denial of service or potentially execute arbitrary code on a system running a vulnerable Linux kernel with SMB client functionality enabled.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this vulnerability. Avoid using SMB client features until the update is applied. If immediate patching is not possible, restrict access to SMB shares or disable SMB client functionality temporarily.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64383. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart