In the Linux kernel, the following vulnerability has been resolved:

smb/client: Fix error code in smb2_aead_req_alloc()

The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn't work.
We would have to do something similar to the previous line where it's
cast to int and then long. However, it's simpler to store the return in
an int ret variable.

This bug would eventually result in a crash when dereference the invalid
error pointer.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d08089f649a0cfb2099c8551ac47eef0cc23fdf2 affected < aa37f5fef78dd11cbf983269da2031e12625c56d
d08089f649a0cfb2099c8551ac47eef0cc23fdf2 affected < cad756733dc3985188983f3e2eb77e2927209099
d08089f649a0cfb2099c8551ac47eef0cc23fdf2 affected < a187883cc1dc784a4d32537f5d316f1b7b9ad76f
d08089f649a0cfb2099c8551ac47eef0cc23fdf2 affected < a1cc432cb0b0a1f74f98a0db3b94ca880c7947ac
d08089f649a0cfb2099c8551ac47eef0cc23fdf2 affected < 61f28012e5650c619223decdb7970e0d3162e949
Linux Linux affected
Version Status Constraints
6.3 affected —
0 unaffected < 6.3
6.6.145 unaffected ≤ 6.6.*
6.12.96 unaffected ≤ 6.12.*
6.18.39 unaffected ≤ 6.18.*
7.1.4 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/61f28012e5650c619223decdb7970e0d3162e949 cve-icon
https://git.kernel.org/stable/c/a187883cc1dc784a4d32537f5d316f1b7b9ad76f cve-icon
https://git.kernel.org/stable/c/a1cc432cb0b0a1f74f98a0db3b94ca880c7947ac cve-icon
https://git.kernel.org/stable/c/aa37f5fef78dd11cbf983269da2031e12625c56d cve-icon
https://git.kernel.org/stable/c/cad756733dc3985188983f3e2eb77e2927209099 cve-icon
History

Thu, 06 Aug 2026 09:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-682

Thu, 06 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler to store the return in an int ret variable. This bug would eventually result in a crash when dereference the invalid error pointer.
Title smb/client: Fix error code in smb2_aead_req_alloc()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-06T07:13:52.716Z

Reserved: 2026-07-19T15:36:31.799Z

Link: CVE-2026-64598

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-06T10:00:05Z

Weaknesses