Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-64381

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
25/07/2026
Última modificación:
25/07/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> smb: client: Fix next buffer leak in receive_encrypted_standard()<br /> <br /> receive_encrypted_standard() allocates next_buffer before checking<br /> whether the number of compound PDUs already reached MAX_COMPOUND. If<br /> the limit check fails, the function returns immediately and the newly<br /> allocated next_buffer is not assigned to server-&gt;smallbuf/server-&gt;bigbuf,<br /> making it leaked.<br /> <br /> Move the MAX_COMPOUND check before allocating next_buffer.

Impacto