Security Advisory

CVE-2026-45972

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-27 12:18:31
Last updated 2026-07-15 00:51:59
Assigner Linux
CVSS score 9.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.