In the Linux kernel, the following vulnerability has been resolved:

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields")
refactored cifs code to change cifs_tcp_ses_lock for tc_lock around
tc_count changes.

There was missing lock around tc_count increment inside
smb2_find_smb_sess_tcon_unlocked().

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00175.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
953953abb66e52c224057ab91e404284fefeab62 affected < 7df1df6f40c0720d30206aa35c0343b962350e0d
601dd3b79769b38d30b693c40afdb2a4b7edf9d0 affected < 13fb413ae22a37c69341918a6d651d19a9b0b9b7
3969db6b22e3d90d8c5f22ac1a7fe0350a94c136 affected < bf4ebdb19ff9b3cdf992b50715fe61633327416a
96c4af418586ee9a6aab61738644366426e05316 affected < e374f4e496fef8168784f93a4477d67be34485fd
96c4af418586ee9a6aab61738644366426e05316 affected < 4d8690dace005a38e6dbde9ecce2da3ad85c7c41
8c59eeeeffa1524ef57e173a89a1a3ff539888d5 affected —
6.6.128 affected < 6.6.142
6.12.75 affected < 6.12.92
6.18.16 affected < 6.18.34
6.19.6 affected < 6.20
Linux Linux affected
Version Status Constraints
7.0 affected —
0 unaffected < 7.0
6.6.142 unaffected ≤ 6.6.*
6.12.92 unaffected ≤ 6.12.*
6.18.34 unaffected ≤ 6.18.*
7.0.11 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7 cve-icon
https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41 cve-icon
https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d cve-icon
https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a cve-icon
https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd cve-icon
History

Mon, 20 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Sun, 19 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
Title smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-20T13:43:41.329Z

Reserved: 2026-07-19T07:54:57.036Z

Link: CVE-2026-64136

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.