CVE-2026-64136
- Source
- https://cve.org/CVERecord?id=CVE-2026-64136
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64136.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64136
- Downstream
BELL (1)
DEBIAN (1)
OESA (1)
RHSA (2)
RLSA (2)
- Related
- Published
- 2026-07-19T15:40:30Z
- Modified
- 2026-10-08T02:48:23Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes.
There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64136.json" }- References
-
- https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7
- https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41
- https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d
- https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a
- https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64136.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64136
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced953953abb66e52c224057ab91e404284fefeab62Fixed7df1df6f40c0720d30206aa35c0343b962350e0d
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced601dd3b79769b38d30b693c40afdb2a4b7edf9d0Fixed13fb413ae22a37c69341918a6d651d19a9b0b9b7
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3969db6b22e3d90d8c5f22ac1a7fe0350a94c136Fixedbf4ebdb19ff9b3cdf992b50715fe61633327416a
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced96c4af418586ee9a6aab61738644366426e05316Fixede374f4e496fef8168784f93a4477d67be34485fdFixed4d8690dace005a38e6dbde9ecce2da3ad85c7c41
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.6.128Fixed6.6.142
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.12.75Fixed6.12.92
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.18.16Fixed6.18.34
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.19.6Fixed6.20
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced8c59eeeeffa1524ef57e173a89a1a3ff539888d5
Affected versions
v6.*
v6.12.75
v6.12.76
v6.12.77
v6.12.78
v6.12.79
v6.12.80
v6.12.81
v6.12.82
v6.12.83
v6.12.84
v6.12.85
v6.12.86
v6.12.87
v6.12.88
v6.12.89
v6.12.90
v6.12.91
v6.18.16
v6.18.17
v6.18.18
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.30
v6.18.31
v6.18.32
v6.18.33
v6.19.10
v6.19.11
v6.19.12
v6.19.13
v6.19.14
v6.19.6
v6.19.7
v6.19.8
v6.19.9
v6.6.128
v6.6.129
v6.6.130
v6.6.131
v6.6.132
v6.6.133
v6.6.134
v6.6.135
v6.6.136
v6.6.137
v6.6.138
v6.6.139
v6.6.140
v6.6.141
Linux / Kernel
Package
- Name
- Kernel