Critical severity9.8NVD Advisory· Published Jul 25, 2026· Updated Oct 19, 2026
CVE-2026-64383
CVE-2026-64383
Description
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix double-free in SMB2_flush() replay
SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit will free the stale response pointer a second time.
Reinitialize resp_buftype and rsp_iov at the top of the replay loop so cleanup only acts on response state produced by the current attempt. This fixes a double-free without changing replay handling for successful requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
55cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.6.32,<6.6.145
- cpe:2.3:o:linux:linux_kernel:6.8:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.8:rc7:*:*:*:*:*:*
- (no CPE)
- osv-coords46 versionspkg:linux/kernelpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0
< 6.6.145+ 45 more
- (no CPE)range: < 6.6.145
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 5.14.0-687.51.1.el9_8
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-211.59.1.el10_2
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 7.1.7-1.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
Patches
Vulnerability mechanics
References
5- git.kernel.org/stable/c/013a9a3da46c5dabcf18f65ea6a47874ba12a15dnvdPatch
- git.kernel.org/stable/c/3407240cde132a4b72d6429a2625a09a2f78adafnvdPatch
- git.kernel.org/stable/c/4be31c943a3a27a5a0251dbb8f5cb89059ec3d5anvdPatch
- git.kernel.org/stable/c/6e27f40b682a5e42a2daae3ce6d96f0e0e16dedbnvdPatch
- git.kernel.org/stable/c/878757163eea684750107a31ea134c103863515dnvdPatch
News mentions
0No linked articles in our index yet.