THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64578 (HIGH 8.2) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound (chained) SMB2 request, ksmbd_smb2_check_message() reads pdu->StructureSize2 without first checking that the c

[NVD] CVE-2026-64578 (HIGH 8.2) — In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound (chained) SMB2 request, ksmbd_smb2_check_message() reads pdu->StructureSize2 without first checking that the c

mednvdPublished 2026-08-05

CVE-2026-64578 CVSS: 8.2 HIGH Published: 2026-08-05T08:16:37.760

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate compound request size before reading StructureSize2

When ksmbd validates a compound (chained) SMB2 request, ksmbd_smb2_check_message() reads pdu->StructureSize2 without first checking that the compound element is large enough to contain it. Structu

Indicators of compromise

CVE-2026-64578cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64578