VULNERABILITY INTELLIGENCE
CVE-2026-64136
CVSS score9.8 CRITICAL
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-07-19
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to change cifs_tcp_ses_lock for tc_lock around tc_count changes. There was missing lock around tc_count increment inside smb2_find_smb_sess_tcon_unlocked().
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')