01 Record

CVE-2026-64598

smb/client: Fix error code in smb2_aead_req_alloc()

HighPUBLISHEDCNA: Linux

CNA base score8.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

View raw JSON

02 Description

smb/client: Fix error code in smb2_aead_req_alloc()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.27% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 20.0% of scored records. A rank, not a probability.

NVD base score

8.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD analysis status

Received. NVD last modified this record on 2026-10-19.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-06 07:13Z2 MO AGO

Last updated

2026-10-19 20:48Z9 DAYS AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.2

Document digest

29e7249ab1a1701e9f1fbc7ff531136519efaf8b8fb939653e43459b8a81b5c3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd08089f649a0cfb2099c8551ac47eef0cc23fdf2 to < aa37f5fef78dd11cbf983269da2031e12625c56d, d08089f649a0cfb2099c8551ac47eef0cc23fdf2 to < cad756733dc3985188983f3e2eb77e2927209099, d08089f649a0cfb2099c8551ac47eef0cc23fdf2 to < a187883cc1dc784a4d32537f5d316f1b7b9ad76f, d08089f649a0cfb2099c8551ac47eef0cc23fdf2 to < a1cc432cb0b0a1f74f98a0db3b94ca880c7947ac, d08089f649a0cfb2099c8551ac47eef0cc23fdf2 to < 61f28012e5650c619223decdb7970e0d3162e949, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/aa37f5fef78dd11cbf983269da2031e12625c56d
git.kernel.orghttps://git.kernel.org/stable/c/cad756733dc3985188983f3e2eb77e2927209099
git.kernel.orghttps://git.kernel.org/stable/c/a187883cc1dc784a4d32537f5d316f1b7b9ad76f
git.kernel.orghttps://git.kernel.org/stable/c/a1cc432cb0b0a1f74f98a0db3b94ca880c7947ac
git.kernel.orghttps://git.kernel.org/stable/c/61f28012e5650c619223decdb7970e0d3162e949

07 Fixed in

Debian 12

linux-6.12
Fixed in 6.12.100-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.96-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.1.4-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.