CVE-2026-64384: smb: client: fix change notify replay double-free
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix change notify replay double-free
A response-bearing attempt can return a replayable error and free its response buffer. If SMB2notifyinit() fails before the next send, cleanup retains the previous buffer type and frees that response again.
Reset response bookkeeping before each attempt to prevent the stale free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64384?
The severity of CVE-2026-64384 is critical with a CVSS score of 9.8.
How do I fix CVE-2026-64384?
To fix CVE-2026-64384, you should update to the latest version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-64384?
CVE-2026-64384 affects systems running the vulnerable versions of the Linux kernel's SMB client.
What type of vulnerability is CVE-2026-64384?
CVE-2026-64384 is classified as a double-free vulnerability in the Linux kernel's SMB client.
What impact does CVE-2026-64384 have?
The impact of CVE-2026-64384 can lead to memory corruption, which may allow a remote attacker to execute arbitrary code.