AZL-93437
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-93437.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-93437
- Upstream
- Published
- 2026-07-25T10:17:21Z
- Modified
- 2026-08-28T17:47:48.414670573Z
- Summary
- CVE-2026-64381 affecting package kernel for versions less than 6.6.145.2-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix next buffer leak in receiveencryptedstandard()
receiveencryptedstandard() allocates nextbuffer before checking whether the number of compound PDUs already reached MAXCOMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked.
Move the MAXCOMPOUND check before allocating nextbuffer.
- References