← Database

CVE-2026-45972

CRITICAL CVSS: 9.8 Published: 2026-05-27 Modified: 2026-07-15

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

Affected Platforms

Linux Linux Kernel

Weakness Type

CWE-416, CWE-825

References