PT-2026-64603 · Linux+2 · Linux Kernel+2

CVE-2026-64382

·

Published

2026-07-25

·

Updated

2026-09-07

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A double-free issue exists in the SMB client. A response-bearing attempt can return a replayable error and free its response buffer. If the SMB2 open init() function fails before the subsequent send, the cleanup process retains the previous buffer type and frees that response a second time. A double-free occurs when the same memory address is freed twice, which can lead to memory corruption or system instability.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2026:57251
ALSA-2026:57252
AZL-93671
CVE-2026-64382
OPENSUSE-SU-2026:11476-1
USN-8726-1
USN-8727-1
USN-8728-1

Affected Products

Linux Kernel
Rocky Linux
Ubuntu