CVE-2026-64381

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the SMB client within the receive encrypted standard() function. The function allocates a next buffer before verifying if the number of compound PDUs (Protocol Data Units) has reached the MAX COMPOUND limit. If this limit is exceeded, the function returns immediately without assigning the allocated next buffer to server->smallbuf or server->bigbuf, resulting in a leak of the allocated memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.