A flaw was found in the ksmbd component of the Linux kernel. This vulnerability arises from an integer overflow when handling Access Control List (ACL) sizes. When a file is configured with a large number of POSIX ACL entries, the system's calculation of the accumulated size can exceed its designated memory, leading to incorrect pointer arithmetic. This can result in the corruption of the buffer, causing existing ACL entries to be overwritten and potentially leading to data integrity issues or system instability.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-31704 https://nvd.nist.gov/vuln/detail/CVE-2026-31704 https://lore.kernel.org/linux-cve-announce/2026050120-CVE-2026-31704-1144@gregkh/T