by Kastro CVE-2026-64136
Linux Linux — smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
Affected
ProductAffectedFixed inSource
Linux953953abb66e52c224057ab91e404284fefeab62 – < 7df1df6f40c0720d30206aa35c0343b962350e0d7df1df6f40c0720d30206aa35c0343b962350e0dCNA
Linux601dd3b79769b38d30b693c40afdb2a4b7edf9d0 – < 13fb413ae22a37c69341918a6d651d19a9b0b9b713fb413ae22a37c69341918a6d651d19a9b0b9b7CNA
Linux3969db6b22e3d90d8c5f22ac1a7fe0350a94c136 – < bf4ebdb19ff9b3cdf992b50715fe61633327416abf4ebdb19ff9b3cdf992b50715fe61633327416aCNA
Linux96c4af418586ee9a6aab61738644366426e05316 – < e374f4e496fef8168784f93a4477d67be34485fde374f4e496fef8168784f93a4477d67be34485fdCNA
Linux96c4af418586ee9a6aab61738644366426e05316 – < 4d8690dace005a38e6dbde9ecce2da3ad85c7c414d8690dace005a38e6dbde9ecce2da3ad85c7c41CNA
Linux8c59eeeeffa1524ef57e173a89a1a3ff539888d5–CNA
Linux6.6.128 – < 6.6.1426.6.142CNA
Linux6.12.75 – < 6.12.926.12.92CNA
Linux6.18.16 – < 6.18.346.18.34CNA
Linux6.19.6 – < 6.206.20CNA
Linux7.07.0.11CNA
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total