Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-64136

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
Back to all
CVE

CVE-2026-64136

smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

In the Linux kernel, the following vulnerability has been resolved:

smb: client: protect tccount increment in smb2findsmbsesstconunlocked()

Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields")

refactored cifs code to change cifstcpseslock for tclock around

tc_count changes.

There was missing lock around tc_count increment inside

smb2findsmbsesstcon_unlocked().

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.8
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://git.kernel.org/stable/c/13fb413ae22a37c69341918a6d651d19a9b0b9b7, https://git.kernel.org/stable/c/4d8690dace005a38e6dbde9ecce2da3ad85c7c41, https://git.kernel.org/stable/c/7df1df6f40c0720d30206aa35c0343b962350e0d, https://git.kernel.org/stable/c/bf4ebdb19ff9b3cdf992b50715fe61633327416a, https://git.kernel.org/stable/c/e374f4e496fef8168784f93a4477d67be34485fd, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64136.json, https://nvd.nist.gov/vuln/detail/CVE-2026-64136, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Severity

9.8

CVSS Score
0
10

Basic Information

Base CVSS
9.8
EPSS Probability
0.00491%
EPSS Percentile
0.40309%
Introduced Version
953953abb66e52c224057ab91e404284fefeab62,601dd3b79769b38d30b693c40afdb2a4b7edf9d0,3969db6b22e3d90d8c5f22ac1a7fe0350a94c136,96c4af418586ee9a6aab61738644366426e05316,0,6.6.128,6.12.75,6.18.16,6.19.6,6.7.0,6.13.0,6.19.0
Fix Available
7df1df6f40c0720d30206aa35c0343b962350e0d,13fb413ae22a37c69341918a6d651d19a9b0b9b7,bf4ebdb19ff9b3cdf992b50715fe61633327416a,4d8690dace005a38e6dbde9ecce2da3ad85c7c41,6.6.142,6.12.92,6.18.34,6.20,7.0.11,6.12.94-1,7.0.0-28.28~24.04.1,7.0.0-1016.16~24.04.1,7.0.0-28.28.1~24.04.3,0:6.12.0-211.50.1.el10_2,1:6.18.35-68.127.amzn2023,1:1.0-0.amzn2023,1:6.12.92-122.166.amzn2023

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading