Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 6.6.128, < 6.6.142 |
References
- https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7Patch
- https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41Patch
- https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0dPatch
- https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416aPatch
- https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fdPatch
FAQ
What is CVE-2026-64136?
CVE-2026-64136 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tc...
How severe is CVE-2026-64136?
CVE-2026-64136 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-64136?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.