CVE-2026-64598 Details
Description
In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler to store the return in an int ret variable. This bug would eventually result in a crash when dereference the invalid error pointer.
A vulnerability in the Linux kernel's SMB client implementation has been addressed. The issue arose in the 'smb2_aead_req_alloc' function, where the 'num_sgs' variable, being a 32-bit unsigned integer, was improperly handled. The original code attempted to use 'ERR_PTR(*num_sgs)' to manage error states, which is incompatible with the variable's type. This mismanagement could lead to a crash by dereferencing an invalid error pointer. The vulnerability has been fixed by correctly processing the 'num_sgs' variable and ensuring proper error handling.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. The specific commit addressing this issue is '61f28012e5650c619223decdb7970e0d3162e949', which is included in the official Linux kernel stable releases.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | CVE Modified | kernel.org |
| Aug 8, 2026 | CVE Modified | kernel.org |
| Aug 6, 2026 | New CVE Received | kernel.org |