THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64383 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_sen

[NVD] CVE-2026-64383 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_flush() replay SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_sen

lownvdPublished 2026-07-25

CVE-2026-64383 CVSS: 9.8 CRITICAL Published: 2026-07-25T10:17:21.587

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix double-free in SMB2_flush() replay

SMB2_flush() keeps its response buffer bookkeeping across replay attempts. If a replayable flush response is received and the retry then fails before cifs_send_recv() stores a replacement response, flush_exit

Indicators of compromise

CVE-2026-64383cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64383