CVE-2026-64384

CVE-2026-64384 is a Linux kernel SMB client vulnerability involving a double-free in handling change-notify replayed responses. A failure of SMB2_notify_init() after a replayable error could cause the previous response buffer to be freed again, risking memory corruption and potential denial of se...

PT-2024-2768 · Envoy +1 · Envoy +1

Name of the Vulnerable Software and Affected Versions: Envoy versions prior to 1.29.1 Envoy versions prior to 1.28.1 Envoy versions prior to 1.27.3 Envoy versions prior to 1.26.7 Description: The issue is related to a use-after-free error in the Envoy proxy server. Exploitation of this issue may...