CVE-2026-64257
kernel: smb: client: reject overlapping data areas in SMB2 responses
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Server Message Block (SMB) client. A remote attacker could exploit a vulnerability where the client improperly handles SMB2 responses containing overlapping data areas. This incorrect processing of malformed network data could lead to a denial of service (DoS) or other severe system impact, compromising the availability and potentially the confidentiality of the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-130 · Improper Handling of Length Parameter Inconsistency