CVE-2026-31608
Description
A flaw was found in the Linux kernel's Server Message Block (SMB) server component. This vulnerability, a double-free error, occurs when the smb_direct_free_sendmsg function is called redundantly after smb_direct_flush_send_list() has already executed it. A remote attacker could potentially exploit this flaw, leading to memory corruption and a denial of service (DoS) on the affected system.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: DoS: Crash, Exit, or Restart
Integrity
Technical Impact: Modify Memory; Modify Application Data
Depending on the type of resource and the expected API behavior, this could lead to memory corruption, data corruption, or execution path corruption.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
