CVE-2026-64597
Received Received - Intake

Double-Free Vulnerability in Linux Kernel SMB Client

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_close_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-64597
EUVD
EUVD-2026-53784

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a double-free issue in the Linux kernel's SMB client implementation. It occurs in the SMB2_close() function where a response buffer can be freed twice if an error happens during initialization before sending a request. The problem stems from stale bookkeeping of response buffers, leading to incorrect cleanup and a double-free condition.

Detection Guidance

This vulnerability is specific to the Linux kernel's SMB client implementation and may not have direct detection commands. Monitor kernel logs for SMB-related errors or crashes after applying updates. Check for kernel panics or smbd service failures.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service (DoS) condition by crashing the system. If exploited, it may lead to kernel memory corruption, system instability, or potential arbitrary code execution in the context of the kernel.

Mitigation Strategies

Update the Linux kernel to the latest patched version. Restart the SMB service (smbd) after updating. Monitor system stability and SMB client operations for any anomalies.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64597. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart