CVE-2026-64387: smb: client: fix query directory replay double-free
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix query directory replay double-free
A response-bearing attempt can return a replayable error and free its response buffer. If SMB2querydirectoryinit() fails before the next send, cleanup retains the previous buffer type and frees that response again.
Reset response bookkeeping before each attempt to prevent the stale free.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64387?
CVE-2026-64387 has a severity rating of critical with a CVSS score of 9.8.
What are the potential impacts of CVE-2026-64387?
CVE-2026-64387 can lead to memory corruption due to a double-free vulnerability during SMB2 directory queries.
How do I fix CVE-2026-64387?
To fix CVE-2026-64387, update your Linux kernel to the latest version that includes the patch for this vulnerability.
Which software is affected by CVE-2026-64387?
CVE-2026-64387 affects the Linux kernel's implementation of the SMB client.
When was CVE-2026-64387 published?
CVE-2026-64387 was published on July 25, 2026.