Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-05-27T00:00:00 kernel: smb: client: fix potential UAF and double free in smb2_open_file() 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-825

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free in smb2_open_file() Zero out @err_iov and @err_buftype before retrying SMB2_open() to prevent an UAF bug if @data != NULL, otherwise a double free.

A flaw was found in the Linux kernel's Server Message Block (SMB) client. This vulnerability, within the `smb2_open_file()` function, could allow an attacker to cause memory corruption due to improper handling of memory during file open operations. This could lead to system instability or potentially enable an attacker to execute arbitrary code.

Red Hat Enterprise Linux 10 Affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Affected kernel Red Hat Enterprise Linux 9 Affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-45972 https://nvd.nist.gov/vuln/detail/CVE-2026-45972 https://lore.kernel.org/linux-cve-announce/2026052736-CVE-2026-45972-6b55@gregkh/T