CVE-2026-45972 — smb: client: fix potential UAF and double free in smb2_open_file()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype befor…
Published: 2026-05-27 · CVSS: 9.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7