CVE-2026-64387 | Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3 SMB Client SMB2_query_directory_init double free

July 25, 2026 Yanac

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.144/6.12.95/6.18.38/7.1.3. The impacted element is the function SMB2_query_directory_init of the component SMB Client. This manipulation causes double free.

This vulnerability appears as CVE-2026-64387. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More