← Back to CVE search

CVE-2026-64381

SMB client

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_buffer before checking whether the number of compound PDUs already reached MAX_COMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked. Move the MAX_COMPOUND check before allocating next_buffer.

EPSS 0.17700000000000002%Risk 0
View source
Published
2026-07-25 10:17:21
Affected versions
unknown
Type
Other
Last modified
2026-08-11 15:01:50
Vector
Pending