In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix double-free in SMB2_close() replay

A response-bearing attempt can return a replayable error and free its
response buffer. If SMB2_close_init() fails before the next send, cleanup
retains the previous buffer type and frees that response again.

Reset response bookkeeping before each attempt to prevent the stale free.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00156.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
433042a91f9373241307725b52de573933ffedbf affected < 037511726228aaf165c7067ff2bfc88eaecdf1f3
4f1fffa2376922f3d1d506e49c0fd445b023a28e affected < 0aa97edf7c347c0f54e7e60c4740574b8120c66a
4f1fffa2376922f3d1d506e49c0fd445b023a28e affected < d15d83125007f673aec4323e1bbbaaffbe87ea13
4f1fffa2376922f3d1d506e49c0fd445b023a28e affected < b18ed621dbfceecea5539848cddcb9272c9a61e1
4f1fffa2376922f3d1d506e49c0fd445b023a28e affected < f96e1cdcb63ed3321142ff2fcdf784e32cda8fee
6.6.32 affected < 6.6.145
Linux Linux affected
Version Status Constraints
6.8 affected —
0 unaffected < 6.8
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/037511726228aaf165c7067ff2bfc88eaecdf1f3 cve-icon
https://git.kernel.org/stable/c/0aa97edf7c347c0f54e7e60c4740574b8120c66a cve-icon
https://git.kernel.org/stable/c/b18ed621dbfceecea5539848cddcb9272c9a61e1 cve-icon
https://git.kernel.org/stable/c/d15d83125007f673aec4323e1bbbaaffbe87ea13 cve-icon
https://git.kernel.org/stable/c/f96e1cdcb63ed3321142ff2fcdf784e32cda8fee cve-icon
History

Thu, 06 Aug 2026 08:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Thu, 06 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_close_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.
Title smb: client: fix double-free in SMB2_close() replay
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-06T07:13:52.117Z

Reserved: 2026-07-19T15:36:31.799Z

Link: CVE-2026-64597

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T09:00:10Z

Weaknesses