CVE-2026-89636
A critical use-after-free vulnerability exists in the Linux kernel's SMB client, allowing remote code execution with no user interaction. When freeing target structures, a pointer to freed memory is not cleared, leading to memory corruption. The issue has been resolved in a kernel patch.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Affected products are not listed in the provided data, but any system running a Linux kernel with the vulnerable SMB client code is potentially at risk.
Real-world impact
An attacker could exploit this to execute arbitrary code on affected systems, potentially leading to full system compromise.
Why this severity
The CVSS score of 9.8 (Critical) indicates a remotely exploitable vulnerability with no complexity, no privileges required, and no user interaction, resulting in high impact on confidentiality, integrity, and availability.
What to do about it
- 01Identify the appropriate kernel update for your Linux distribution that includes the patch for CVE-2026-89636.
- 02Install the updated kernel package.
- 03Restart your system to load the new kernel.
NVD description states the vulnerability has been resolved by setting ce->tgthint to NULL in free_tgts().
Timeline
- Sep 11, 2026 · 2d agoPublishedDisclosed and added to the National Vulnerability Database.
- Sep 13, 2026 · 6h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.