CVE-2026-64381
- Source
- https://cve.org/CVERecord?id=CVE-2026-64381
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64381.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64381
- Downstream
- Published
- 2026-07-25T08:50:31.209Z
- Modified
- 2026-07-27T04:03:19.868198917Z
- Summary
- smb: client: Fix next buffer leak in receive_encrypted_standard()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix next buffer leak in receiveencryptedstandard()
receiveencryptedstandard() allocates nextbuffer before checking whether the number of compound PDUs already reached MAXCOMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked.
Move the MAXCOMPOUND check before allocating nextbuffer.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64381.json" }- References
-
- https://git.kernel.org/stable/c/07e0ab81df1790afa35732a4e8e07ff831b29008
- https://git.kernel.org/stable/c/1c6267a1d5cf4c73b656f8181b310cbbb3e4767b
- https://git.kernel.org/stable/c/297243e365fc9fe2f8e9b7dd535a65d922cd108b
- https://git.kernel.org/stable/c/67097772df7791c53d608f04bd31c676ccf79b83
- https://git.kernel.org/stable/c/68fc0b6cc03ca58060c0f36454e169f5fe258974
- https://git.kernel.org/stable/c/9136a08dc29328edd9867f2545e73906ac9df93b
- https://git.kernel.org/stable/c/927d4805aea0a287d36dd4f826ee24d69a2afee3
- https://git.kernel.org/stable/c/94e4f672db029414b9888b5137a7559f1febf2d8
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64381.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64381
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb24df3e30cbf48255db866720fb71f14bf9d2f39Fixed94e4f672db029414b9888b5137a7559f1febf2d8Fixed68fc0b6cc03ca58060c0f36454e169f5fe258974Fixed07e0ab81df1790afa35732a4e8e07ff831b29008Fixed9136a08dc29328edd9867f2545e73906ac9df93bFixed67097772df7791c53d608f04bd31c676ccf79b83Fixed297243e365fc9fe2f8e9b7dd535a65d922cd108bFixed927d4805aea0a287d36dd4f826ee24d69a2afee3Fixed1c6267a1d5cf4c73b656f8181b310cbbb3e4767b
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced4.19.0Fixed5.10.261
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.212
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.178
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.145
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.96
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.39
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.1.4