CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix double-free in SMB2close() replay
A response-bearing attempt can return a replayable error and free its response buffer. If SMB2closeinit() fails before the next send, cleanup retains the previous buffer type and frees that response again.
Reset response bookkeeping before each attempt to prevent the stale free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64597?
CVE-2026-64597 has a risk score of 34.
How do I fix CVE-2026-64597?
To fix CVE-2026-64597, update to the latest version of the Linux Kernel that has addressed the double-free issue in SMB2_close().
What systems are affected by CVE-2026-64597?
CVE-2026-64597 affects systems running certain versions of the Linux Kernel that utilize the SMB client.
What are the potential impacts of CVE-2026-64597?
The potential impacts of CVE-2026-64597 include memory corruption and application crashes due to the double-free vulnerability.
When was CVE-2026-64597 published?
CVE-2026-64597 was published on August 6, 2026.