9.8

CVE-2026-64597: linux Double Free

CVSS: 9.8v3.1CriticalReceived
AliasesUBUNTU-CVE-2026-64597DEBIAN-CVE-2026-64597
Published 06-08-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-64597 is a critical (CVSS 9.8) Double Free vulnerability in linux. EPSS estimates a 0.36% chance of exploitation in the next 30 days, higher than 28.3% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
0.36%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 28 · Related 26
OPENSUSE-SU-2026:11476-1OPENSUSE-SU-2026:22091-1RHSA-2026:64775RHSA-2026:66180SUSE-SU-2026:23477-1SUSE-SU-2026:23481-1

Timeline

  1. 06-08-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_close() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_close_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.36%

Chance of exploitation in the next 30 days

Percentile

28%

Versus all other CVEs

30-day change

0.00 pp

From 0.36% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.36%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu142 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.12.96-1 | < 7.1.4-1
  • linux-6.12< 6.12.100-1~deb12u1
Linux1 product
  • linux≥ 433042a91f9373241307725b52de573933ffedbf, < 037511726228aaf165c7067ff2bfc88eaecdf1f3 | ≥ 4f1fffa2376922f3d1d506e49c0fd445b023a28e, < 0aa97edf7c347c0f54e7e60c4740574b8120c66a | ≥ 4f1fffa2376922f3d1d506e49c0fd445b023a28e, < d15d83125007f673aec4323e1bbbaaffbe87ea13 | ≥ 4f1fffa2376922f3d1d506e49c0fd445b023a28e, < b18ed621dbfceecea5539848cddcb9272c9a61e1 | ≥ 4f1fffa2376922f3d1d506e49c0fd445b023a28e, < f96e1cdcb63ed3321142ff2fcdf784e32cda8fee | ≥ 6.6.32, < 6.6.145 | 6.8

3 vendors · 145 products

References

24 links
Show all 24 references