CVE-2026-64383
kernel: smb: client: fix double-free in SMB2_flush() replay
Severity
ImportantRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 25, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's Server Message Block (SMB) client. This vulnerability, a double-free error within the SMB2_flush() replay mechanism, occurs when the system attempts to free a memory buffer twice. A malicious SMB server could exploit this by sending a specially crafted flush response, potentially leading to memory corruption. This could result in a denial of service or, in some scenarios, arbitrary code execution.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.4CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L
CWE-1341 · Multiple Releases of Same Resource or Handle