CVE-2026-64578

CVE-2026-64578 affects the Linux kernel ksmbd SMB2 handling. A compound (chained) SMB2 request could trigger a slab-out-of-bounds read when ksmbd_smb2_check_message() reads the StructureSize2 field at offset 64 without first ensuring the compound element is large enough. The vulnerable path occur...