CVE-2026-64381

A flaw was found in the SMB client of the Linux kernel. A remote attacker could exploit a memory leak in the receive_encrypted_standard() function by sending specially crafted compound Protocol Data Units (PDUs). This vulnerability occurs because a buffer is allocated before a necessary size check, leading to the buffer not being freed if the check fails. Repeated exploitation of this flaw could lead to a Denial of Service (DoS) due to memory exhaustion.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.