)]}'
{
  "commit": "fdc1aebadcf910bcaa07dbc287989e5b3ed46781",
  "tree": "d20ec321ee9093341e41238556acfd32ceeeda3a",
  "parents": [
    "d1e3663657f923f025db1108e46822b685f5ea7f"
  ],
  "author": {
    "name": "Henrique Carvalho",
    "email": "henrique.carvalho@suse.com",
    "time": "Thu Jun 18 17:34:35 2026 -0300"
  },
  "committer": {
    "name": "Dom Huh",
    "email": "domhuh@google.com",
    "time": "Thu Aug 13 17:24:17 2026 -0700"
  },
  "message": "smb: client: fix double-free in SMB2_close() replay\n\ncommit f96e1cdcb63ed3321142ff2fcdf784e32cda8fee upstream.\n\nA response-bearing attempt can return a replayable error and free its\nresponse buffer. If SMB2_close_init() fails before the next send, cleanup\nretains the previous buffer type and frees that response again.\n\nReset response bookkeeping before each attempt to prevent the stale free.\n\nBUG\u003db/543619726\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed CVE-2026-64597 in the Linux kernel.\n\ncos-patch: security-moderate\nFixes: 4f1fffa23769 (\"cifs: commands that are retried should have replay flag set\")\nCc: stable@vger.kernel.org\nChange-Id: I319959a4630e589ec43d6f4ba73655f362d7f2d2\nSigned-off-by: Henrique Carvalho \u003chenrique.carvalho@suse.com\u003e\nSigned-off-by: Steve French \u003cstfrench@microsoft.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Dom Huh \u003cdomhuh@google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/184246\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Derek Taylor \u003cddtaylor@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "80c53d44692128dec18afe3a25d8802daf45f2c0",
      "old_mode": 33188,
      "old_path": "fs/smb/client/smb2pdu.c",
      "new_id": "170f182dabcfa4af99a9590eb68c604fd9c09d83",
      "new_mode": 33188,
      "new_path": "fs/smb/client/smb2pdu.c"
    }
  ]
}