In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard()… (CVE-2026-64381)
Source GCVE Database
Not known to be exploited : monitor for a fix to affected systems.
Data as of 10/24/2026, 20:40:31 UTC
No CVSS score from NVD or the CNA
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
What to do
AI-suggested
The vulnerability has been resolved in the Linux kernel by reordering the check and allocation in the receive_encrypted_standard() function. No specific patch links are provided here; users should apply the latest Linux kernel updates from their vendor or distribution to receive this fix.
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_buffer before checking whether the number of compound PDUs already reached MAX_COMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked. Move the MAX_COMPOUND check before allocating next_buffer.
Impact
This vulnerability causes a memory leak in the Linux kernel SMB client. While it does not directly lead to code execution or privilege escalation, memory leaks can degrade system performance or stability over time. There are no known exploits in the wild for this issue.
References
- nvd.nist.gov/vuln/detail/CVE-2026-64381 (opens in a new tab)
- git.kernel.org/stable/c/07e0ab81df1790afa35732a4e8e07ff831b29008 (opens in a new tab)
- git.kernel.org/stable/c/1c6267a1d5cf4c73b656f8181b310cbbb3e4767b (opens in a new tab)
- git.kernel.org/stable/c/297243e365fc9fe2f8e9b7dd535a65d922cd108b (opens in a new tab)
- git.kernel.org/stable/c/67097772df7791c53d608f04bd31c676ccf79b83 (opens in a new tab)
- git.kernel.org/stable/c/68fc0b6cc03ca58060c0f36454e169f5fe258974 (opens in a new tab)
- git.kernel.org/stable/c/9136a08dc29328edd9867f2545e73906ac9df93b (opens in a new tab)
- git.kernel.org/stable/c/927d4805aea0a287d36dd4f826ee24d69a2afee3 (opens in a new tab)
- git.kernel.org/stable/c/94e4f672db029414b9888b5137a7559f1febf2d8 (opens in a new tab)