CVE-2026-64383

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the SMB client. The SMB2 flush() function maintains response buffer bookkeeping across replay attempts. If a replayable flush response is received and the subsequent retry fails before cifs send recv() stores a replacement response, the flush exit function frees the stale response pointer a second time. A double-free occurs when the same memory address is freed twice, which can lead to memory corruption or system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.