CVE-2026-64448

A flaw was found in the Linux kernel's Server Message Block (SMB) client. An attacker, by operating a malicious SMB server, could send specially crafted responses during the session negotiation phase. This could cause the client to read beyond the intended memory buffer, potentially leading to the disclosure of sensitive information from the kernel's memory.

Base score treats the realistic effect as DoS only. Paranoid score keeps the same bug class and raises confidentiality to low only, not HHH, because the patch evidence shows reads past the receive buffer but no write primitive.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.