AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-64598

HIGH · CVSS 8.8 EPSS 0.28%

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's SMB client can lead to a crash due to improper handling of the "*num_sgs" variable, which is incorrectly processed as an error pointer. This issue affects systems utilizing the SMB protocol and could result in service disruptions. Linux administrators and developers should prioritize addressing this vulnerability to maintain system stability and prevent potential downtime.

CVE
CVE-2026-64598
Severity
HIGH
CVSS
8.8
EPSS
0.28%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: smb/client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn't work. We would have to do something similar to the previous line where it's cast to int and then long. However, it's simpler to store the return in an int ret variable. This bug would eventually result in a crash when dereference the invalid error pointer.