Answer in brief
CVE-2026-64257 records a Unknown severity vulnerability in smb: client: reject overlapping data areas in SMB2 responses. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=31c6312608c60b72a1feb99a5afb680645a3e8a3 <445ece263131780dee273d727a4d6f11934feec7 || >=573e502d14714d2947e22e7eff40ec20a6a44a42 <36bfa52459e45c0d5b668de2f1c91f6dc5c67775 || >=419ec1b604d7fb60c10aec2dc062371f9fcd4940 <4a9d2657d3e05f6ed09c148cb127b4e58702275f || >=ceb875a375dedbf51c9425c1d13a2d7a8435c08c <fdafa1e68dc75045b7b617e6e7d2854950804d83 || >=6e9d10f62773b99bd927940fd9cbdfe7207e23ff <57cba95f0e97c6f6e45e6731da30aff091bd7460 || >=53b7c271f06be4dd5cfc8c6ef552a8355c891a7f <8986c932905ea508d66da421eb2eb6e676ace1fe || 8d0bbc78046d264bbf6a574ea6f9072258a43e35 || b6a381c01e2ac98a48e32ac0f2a45bbadd9e26b0 || >=5.10.261 <5.11 || >=5.15.212 <5.16 | 445ece263131780dee273d727a4d6f11934feec7, 36bfa52459e45c0d5b668de2f1c91f6dc5c67775, 4a9d2657d3e05f6ed09c148cb127b4e58702275f, fdafa1e68dc75045b7b617e6e7d2854950804d83, 57cba95f0e97c6f6e45e6731da30aff091bd7460, 8986c932905ea508d66da421eb2eb6e676ace1fe, 5.11, 5.16 |
| Linux/Linuxgeneric | 7.2-rc3 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: client: restrict implied bcc[0] exemption to responses without data area") restricted the implied bcc[0] length exception to responses without a data area. However, the overlap handling in __smb2_calc_size() clears data_length, which can make an invalid response appear to have no data area and so qualify for the exception. Track data area overlap separately and reject such responses before applying the length compatibility exceptions.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-64257 records a Unknown severity vulnerability in smb: client: reject overlapping data areas in SMB2 responses. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=31c6312608c60b72a1feb99a5afb680645a3e8a3 <445ece263131780dee273d727a4d6f11934feec7 || >=573e502d14714d2947e22e7eff40ec20a6a44a42 <36bfa52459e45c0d5b668de2f1c91f6dc5c67775 || >=419ec1b604d7fb60c10aec2dc062371f9fcd4940 <4a9d2657d3e05f6ed09c148cb127b4e58702275f || >=ceb875a375dedbf51c9425c1d13a2d7a8435c08c <fdafa1e68dc75045b7b617e6e7d2854950804d83 || >=6e9d10f62773b99bd927940fd9cbdfe7207e23ff <57cba95f0e97c6f6e45e6731da30aff091bd7460 || >=53b7c271f06be4dd5cfc8c6ef552a8355c891a7f <8986c932905ea508d66da421eb2eb6e676ace1fe || 8d0bbc78046d264bbf6a574ea6f9072258a43e35 || b6a381c01e2ac98a48e32ac0f2a45bbadd9e26b0 || >=5.10.261 <5.11 || >=5.15.212 <5.16 | 445ece263131780dee273d727a4d6f11934feec7, 36bfa52459e45c0d5b668de2f1c91f6dc5c67775, 4a9d2657d3e05f6ed09c148cb127b4e58702275f, fdafa1e68dc75045b7b617e6e7d2854950804d83, 57cba95f0e97c6f6e45e6731da30aff091bd7460, 8986c932905ea508d66da421eb2eb6e676ace1fe, 5.11, 5.16 |
| Linux/Linuxgeneric | 7.2-rc3 | Not reported |
Published upstream
Jul 25, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject overlapping data areas in SMB2 responses Commit 53b7c271f06b ("smb: client: restrict implied bcc[0] exemption to responses without data area") restricted the implied bcc[0] length exception to responses without a data area. However, the overlap handling in __smb2_calc_size() clears data_length, which can make an invalid response appear to have no data area and so qualify for the exception. Track data area overlap separately and reject such responses before applying the length compatibility exceptions.
Quoted source text, attributed separately from HOL analysis.