Direct naar de inhoud
Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 7 min 118 bronnen 3 kritiek 38 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-64385

CRITICAL · 9.8 CVSS Gepubliceerd: CWE-415

Beschrijving

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix double-free in SMB2_ioctl() replay

A response-bearing attempt can return a replayable error and free its
response buffer. If SMB2_ioctl_init() fails before the next send, cleanup
retains the previous buffer type and frees that response again.

Reset response bookkeeping before each attempt to prevent the stale free.

Vendors

Linux

Affected products

Linux Kernel

References