Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64136

In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9bea5814ada1e26ac4ade97089ccb27791d3619d93f69cea4cb61b44390801fc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"les…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7df1df6f40c0720d30206aa35c0343b962350e0d","status":"affected","version":"953953abb66e52c224057ab91e404284fefeab62","versionType":"git"},{"lessThan":"13fb413ae22a37c69341918a6d651d19a9b0b9b7","status":"affected","version":"601dd3b79769b38d30b693c40afdb2a4b7edf9d0","versionType":"git"},{"lessThan":"bf4ebdb19ff9b3cdf992b50715fe61633327416a","status":"affected","version":"3969db6b22e3d90d…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"les…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/client/smb2transport.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7df1df6f40c0720d30206aa35c0343b962350e0d","status":"affected","version":"953953abb66e52c224057ab91e404284fefeab62","versionType":"git"},{"lessThan":"13fb413ae22a37c69341918a6d651d19a9b0b9b7","status":"affected","version":"601dd3b79769b38d30b693c40afdb2a4b7edf9d0","versionType":"git"},{"lessThan":"bf4ebdb19ff9b3cdf992b50715fe61633327416a","status":"affected","version":"3969db6b22e3d90d…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/metrics/0/cvssV3_1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e05e8170c63c54a0760babaf7da7e729e2f3d0e51507df645e5f55b047b7e6df · sha256:268479e9ac2945ab… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer