Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.1.163, < 6.1.165 |
Related Weaknesses (CWE)
References
- https://git.kernel.org/stable/c/4d339b219004869e96c4ce56b8891f83a38da4c0Patch
- https://git.kernel.org/stable/c/639deb962986ef2f5e2a6d5a600c66f922471e81Patch
- https://git.kernel.org/stable/c/7425453ea16dbc3bbb0f6cac4d60b537e5e4d151Patch
- https://git.kernel.org/stable/c/96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74Patch
- https://git.kernel.org/stable/c/e66dcf7bb9c4df5582c82bc3582725abcbfbea73Patch
- https://git.kernel.org/stable/c/ebbbc4bfad4cb355d17c671223d0814ee3ef4edaPatch
- https://access.redhat.com/security/cve/CVE-2026-45972
- https://bugzilla.redhat.com/show_bug.cgi?id=2481973
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45972.json
FAQ
What is CVE-2026-45972?
CVE-2026-45972 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() ...
How severe is CVE-2026-45972?
CVE-2026-45972 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-45972?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.