PT-2026-61453 · Linux · Linux

CVE-2026-64136 · Published 2026-07-19 · Updated 2026-07-19

NVD

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the Linux kernel, the following vulnerability has been resolved:

smb: client: protect tc count increment in smb2 find smb sess tcon unlocked()

Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs tcp ses lock for tc lock around tc count changes.

There was missing lock around tc count increment inside smb2 find smb sess tcon unlocked().

Fix

Related Identifiers

CVE-2026-64136

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-64136 · Security Note
• https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7 · Note
• https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd · Note
• https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41 · Note
• https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d · Note
• https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a · Note