CVE-2026-64385
⛔ criticalSummary
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-free in SMB2_ioctl() replay A response-bearing attempt can return a replayable error and free its response buffer. If SMB2_ioctl_init() fails before the next send, cleanup retains the previous buffer type and frees that response again. Reset response bookkeeping before each attempt to prevent the stale free.
CVSS Score
9.8
Critical
EPSS Score
0.5
Exploit Probability
Published Date
2026-07-25
First Seen: 2026-07-31
📊 Relative Risk Intelligence
This CVE is Very High Risk - more severe than 90.5% of all 340,405 vulnerabilities in our database.
#32,269
Top 10% most severe
Severity Percentile
Last Modified
2026-07-27
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H