CVE-2026-64381: smb: client: Fix next buffer leak in receive_encrypted_standard()
In the Linux kernel, the following vulnerability has been resolved:
smb: client: Fix next buffer leak in receiveencryptedstandard()
receiveencryptedstandard() allocates nextbuffer before checking whether the number of compound PDUs already reached MAXCOMPOUND. If the limit check fails, the function returns immediately and the newly allocated nextbuffer is not assigned to server->smallbuf/server->bigbuf, making it leaked.
Move the MAXCOMPOUND check before allocating nextbuffer.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update the Linux kernel so that the MAX_COMPOUND limit check is performed before allocating next_buffer in receive_encrypted_standard() (fixes the next_buffer leak when the MAX_COMPOUND check fails and the function returns immediately).
Linux kernel MAX_COMPOUND check placement = Move MAX_COMPOUND check before allocating next_buffer