CVE-2026-64381

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/07/2026
Last modified:
25/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> smb: client: Fix next buffer leak in receive_encrypted_standard()<br /> <br /> receive_encrypted_standard() allocates next_buffer before checking<br /> whether the number of compound PDUs already reached MAX_COMPOUND. If<br /> the limit check fails, the function returns immediately and the newly<br /> allocated next_buffer is not assigned to server-&gt;smallbuf/server-&gt;bigbuf,<br /> making it leaked.<br /> <br /> Move the MAX_COMPOUND check before allocating next_buffer.

Impact