CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc()
In the Linux kernel, the following vulnerability has been resolved:
smb/client: Fix error code in smb2aeadreqalloc()
The "numsgs" variable is a u32 so "ERRPTR(numsgs)" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler to store the return in an int ret variable.
This bug would eventually result in a crash when dereference the invalid error pointer.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64598?
CVE-2026-64598 has a risk rating of 34.
How do I fix CVE-2026-64598?
To fix CVE-2026-64598, ensure you update to the patched version of the Linux kernel that addresses this vulnerability.
What impact does CVE-2026-64598 have on the Linux kernel?
CVE-2026-64598 could affect the proper allocation of error codes in the SMB2 AEAD request handling.
Which versions of the Linux kernel are affected by CVE-2026-64598?
CVE-2026-64598 impacts specific versions of the Linux kernel that include the vulnerable code.
How was CVE-2026-64598 resolved?
CVE-2026-64598 was resolved by correcting the error code handling in the smb2_aead_req_alloc function.