{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "b24df3e30cbf48255db866720fb71f14bf9d2f39"
            },
            {
              "fixed": "94e4f672db029414b9888b5137a7559f1febf2d8"
            },
            {
              "fixed": "68fc0b6cc03ca58060c0f36454e169f5fe258974"
            },
            {
              "fixed": "07e0ab81df1790afa35732a4e8e07ff831b29008"
            },
            {
              "fixed": "9136a08dc29328edd9867f2545e73906ac9df93b"
            },
            {
              "fixed": "67097772df7791c53d608f04bd31c676ccf79b83"
            },
            {
              "fixed": "297243e365fc9fe2f8e9b7dd535a65d922cd108b"
            },
            {
              "fixed": "927d4805aea0a287d36dd4f826ee24d69a2afee3"
            },
            {
              "fixed": "1c6267a1d5cf4c73b656f8181b310cbbb3e4767b"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.19.0"
            },
            {
              "fixed": "5.10.261"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.212"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.178"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.145"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.96"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.39"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64381.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix next buffer leak in receive_encrypted_standard()\n\nreceive_encrypted_standard() allocates next_buffer before checking\nwhether the number of compound PDUs already reached MAX_COMPOUND. If\nthe limit check fails, the function returns immediately and the newly\nallocated next_buffer is not assigned to server-\u003esmallbuf/server-\u003ebigbuf,\nmaking it leaked.\n\nMove the MAX_COMPOUND check before allocating next_buffer.",
  "id": "CVE-2026-64381",
  "modified": "2026-07-27T03:56:35.526630268Z",
  "published": "2026-07-25T08:50:31.209Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/07e0ab81df1790afa35732a4e8e07ff831b29008"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1c6267a1d5cf4c73b656f8181b310cbbb3e4767b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/297243e365fc9fe2f8e9b7dd535a65d922cd108b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/67097772df7791c53d608f04bd31c676ccf79b83"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/68fc0b6cc03ca58060c0f36454e169f5fe258974"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9136a08dc29328edd9867f2545e73906ac9df93b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/927d4805aea0a287d36dd4f826ee24d69a2afee3"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/94e4f672db029414b9888b5137a7559f1febf2d8"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64381.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64381"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "summary": "smb: client: Fix next buffer leak in receive_encrypted_standard()"
}