smb2

CVE-2026-64578 addresses an out-of-bounds read in Linux’s in-kernel SMB server, ksmbd, when it processes a malformed compound SMB2 request. The practical action is for administrators running ksmbd to move to a kernel containing the upstream fix; Windows clients, Windows Server’s own SMB service...

A subtle pointer-reset bug in the Linux kernel's in‑kernel SMB server, ksmbd, has been assigned CVE‑2026‑23220 and fixed upstream; left unpatched the defect can cause the server to loop indefinitely while repeatedly reprocessing the same failed request, flooding logs and driving CPU usage to...