CVE-2026-64386: smb: client: fix query_info() replay double-free
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix queryinfo() replay double-free
A response-bearing attempt can return a replayable error and free its response buffer. If SMB2queryinfoinit() fails before the next send, cleanup retains the previous buffer type and frees that response again.
Reset response bookkeeping before each attempt to prevent the stale free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64386?
The severity of CVE-2026-64386 is critical with a CVSS score of 9.8.
How do I fix CVE-2026-64386?
To fix CVE-2026-64386, update your Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2026-64386?
CVE-2026-64386 affects the Linux kernel in systems that utilize the SMB client functionality.
What type of vulnerability is CVE-2026-64386?
CVE-2026-64386 is a double-free vulnerability in the Linux kernel's SMB client implementation.
What are the potential consequences of exploiting CVE-2026-64386?
Exploiting CVE-2026-64386 could lead to a denial-of-service condition or remote code execution on affected systems.