CVE-2026-45972
smb: client: fix potential UAF and double free in smb2_open_file()
CVSS Score
9.8
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | May 27, 2026 |
| Last Updated | May 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new critical vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Linux / Linux
743f70406264348c0830f38409eb6c40a42fb2db < 96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74 3a6d6b332f92990958602c1e35ce0173e2dd62e9 < 7425453ea16dbc3bbb0f6cac4d60b537e5e4d151 b64e3b5d8d759dd4333992e4ba4dadf9359952c8 < 4d339b219004869e96c4ce56b8891f83a38da4c0 9ee608a64e37cea5b4b13e436c559dd0fb2ad1b5 < e66dcf7bb9c4df5582c82bc3582725abcbfbea73 e3a43633023e3cacaca60d4b8972d084a2b06236 < 639deb962986ef2f5e2a6d5a600c66f922471e81 e3a43633023e3cacaca60d4b8972d084a2b06236 < ebbbc4bfad4cb355d17c671223d0814ee3ef4eda 6.1.163 < 6.1.165 6.6.124 < 6.6.128 6.12.70 < 6.12.75 6.18.10 < 6.18.14
Linux / Linux
6.19
References
git.kernel.org: https://git.kernel.org/stable/c/96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74 git.kernel.org: https://git.kernel.org/stable/c/7425453ea16dbc3bbb0f6cac4d60b537e5e4d151 git.kernel.org: https://git.kernel.org/stable/c/4d339b219004869e96c4ce56b8891f83a38da4c0 git.kernel.org: https://git.kernel.org/stable/c/e66dcf7bb9c4df5582c82bc3582725abcbfbea73 git.kernel.org: https://git.kernel.org/stable/c/639deb962986ef2f5e2a6d5a600c66f922471e81 git.kernel.org: https://git.kernel.org/stable/c/ebbbc4bfad4cb355d17c671223d0814ee3ef4eda