CVE-2026-31608: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()
In the Linux kernel, the following vulnerability has been resolved:
smb: server: avoid double-free in smbdirectfreesendmsg after smbdirectflushsendlist()
smbdirectflushsendlist() already calls smbdirectfreesendmsg(), so we should not call it again after postsendmsg() moved it to the batch list.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31608?
CVE-2026-31608 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2026-31608?
To fix CVE-2026-31608, users should upgrade to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2026-31608?
CVE-2026-31608 affects certain versions of the Linux kernel that implement the SMB server functionality.
What types of attacks could CVE-2026-31608 facilitate?
CVE-2026-31608 could facilitate denial of service attacks by allowing attackers to exploit the double-free vulnerability.
Is CVE-2026-31608 being actively exploited in the wild?
As of the latest information, there are no confirmed reports of CVE-2026-31608 being actively exploited in the wild.