CVE-2026-64598

Popis

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The -*num_sgs- variable is a u32 so -ERR_PTR(*num_sgs)- doesn-t work. We would have to do something similar to the previous line where it-s cast to int and then long. However, it-s simpler to store the return in an int ret variable. This bug would eventually result in a crash when dereference the invalid error pointer.