Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-31609

smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch_flush() already calls smbd_free_send_io(), so we should not call it again after smbd_post_send() moved it to the batch list.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • cca0526ef2344cab6944d7f441fc24e152da031b to < a9940dcbe5cb92482c04efc7341039ddf7dbf607affected
  • 37b5c06956183b65e6808b509cf637632016cdf7 to < 22b7c1c619d808aec4cad3dc42103345e370d107affected
  • 21538121efe6c8c5b51c742fa02cbe820bc48714 to < f9a162c2bbcd0ac85bd07c5b37cf20286048b65caffected
  • 21538121efe6c8c5b51c742fa02cbe820bc48714 to < 27b7c3e916218b5eb2ee350211140e961bfc49beaffected
  • 6.18.11 to < 6.18.24affected
  • 6.19.1 to < 6.19.14affected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0.1 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References