by Kastro CVE-2026-64257
Linux Linux — smb: client: reject overlapping data areas in SMB2 responses
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: client: restrict implied bcc[0] exemption to responses without data area") restricted the implied bcc[0] length exception to responses without a data area. However, the overlap handling in __smb2_calc_size() clears data_length, which can make an invalid response appear to have no data area and so qualify for the exception. Track data area overlap separately and reject such responses before applying the length compatibility exceptions.
Affected
ProductAffectedFixed inSource
Linux31c6312608c60b72a1feb99a5afb680645a3e8a3 – < 445ece263131780dee273d727a4d6f11934feec7445ece263131780dee273d727a4d6f11934feec7CNA
Linux573e502d14714d2947e22e7eff40ec20a6a44a42 – < 36bfa52459e45c0d5b668de2f1c91f6dc5c6777536bfa52459e45c0d5b668de2f1c91f6dc5c67775CNA
Linux419ec1b604d7fb60c10aec2dc062371f9fcd4940 – < 4a9d2657d3e05f6ed09c148cb127b4e58702275f4a9d2657d3e05f6ed09c148cb127b4e58702275fCNA
Linuxceb875a375dedbf51c9425c1d13a2d7a8435c08c – < fdafa1e68dc75045b7b617e6e7d2854950804d83fdafa1e68dc75045b7b617e6e7d2854950804d83CNA
Linux6e9d10f62773b99bd927940fd9cbdfe7207e23ff – < 57cba95f0e97c6f6e45e6731da30aff091bd746057cba95f0e97c6f6e45e6731da30aff091bd7460CNA
Linux53b7c271f06be4dd5cfc8c6ef552a8355c891a7f – < 8986c932905ea508d66da421eb2eb6e676ace1fe8986c932905ea508d66da421eb2eb6e676ace1feCNA
Linux8d0bbc78046d264bbf6a574ea6f9072258a43e35–CNA
Linuxb6a381c01e2ac98a48e32ac0f2a45bbadd9e26b0–CNA
Linux5.10.261 – < 5.115.11CNA
Linux5.15.212 – < 5.165.16CNA
Linuxsee advisory–CNA
Scores by source
Linux (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H