CVE-2024-46686 smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Two SMB Vulnerabilities in February 2026 Microsoft has published information on two critical vulnerabilities affecting SMB protocol implementations. CVE-2024-46742 relates to a potential null pointer dereference in the server component, while CVE-2024-46686 addresses a similar issue in the client component. Both vulnerabilities were previously published in September 2024. 2 sources 48