exploitDog

CVE-2026-45972

Опубликовано: 27 мая 2026

Источник: nvd

CVSS3: 9.8

CVSS3: 7

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix potential UAF and double free in smb2_open_file()

Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.1.163 (включая) до 6.1.165 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.6.124 (включая) до 6.6.128 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.12.70 (включая) до 6.12.75 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.18.10 (включая) до 6.18.14 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19.1 (включая) до 6.19.4 (исключая)

cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00333

Низкий

9.8 Critical

CVSS3

7 High

CVSS3

Дефекты

CWE-416

CWE-825

Связанные уязвимости

CVE-2026-45972

CVSS3: 9.8

ubuntu

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

CVE-2026-45972

CVSS3: 7

redhat

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

CVE-2026-45972

CVSS3: 9.8

debian

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: s ...

GHSA-6w7x-q46j-6x9r

CVSS3: 9.8

github

2 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

ELSA-2026-50372

oracle-oval

26 дней назад

ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)

EPSS

Процентиль: 26%

0.00333

Низкий

9.8 Critical

CVSS3

7 High

CVSS3

Дефекты

CWE-416

CWE-825