CVE-2026-64598
Received Received - Intake

Kernel Memory Corruption in SMB Client

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler to store the return in an int ret variable. This bug would eventually result in a crash when dereference the invalid error pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-06
Last Modified
2026-08-06
Generated
2026-08-06
AI Q&A
2026-08-06
EPSS Evaluated
N/A
NVD
CVE-2026-64598
EUVD
EUVD-2026-53785

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where an incorrect error pointer is created due to improper type casting. The code attempts to use ERR_PTR with a u32 variable, which fails because ERR_PTR expects a long integer. This leads to an invalid error pointer that later causes a system crash when dereferenced.

Detection Guidance

This vulnerability is specific to the Linux kernel's SMB client implementation and may not have direct network detection methods. Monitor kernel logs for crashes or errors related to smb2_aead_req_alloc() or SMB client operations. Check for kernel oops messages or system crashes after SMB operations.

Impact Analysis

If exploited, this vulnerability could crash the system by dereferencing an invalid error pointer. This may lead to denial of service, data corruption, or potential privilege escalation if an attacker can trigger the condition.

Mitigation Strategies

Apply the latest Linux kernel patches or updates that address this issue. If using a distribution with backported fixes, ensure your kernel version includes the patch for smb2_aead_req_alloc(). Avoid using SMB client features until patched. Monitor vendor advisories for updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64598. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart