CVE-2026-31609: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
In the Linux kernel, the following vulnerability has been resolved:
smb: client: avoid double-free in smbdfreesendio() after smbdsendbatchflush()
smbdsendbatchflush() already calls smbdfreesendio(), so we should not call it again after smbdpostsend() moved it to the batch list.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31609?
CVE-2026-31609 is classified as a moderate severity vulnerability due to the potential for a double-free error in the Linux kernel.
How do I fix CVE-2026-31609?
To fix CVE-2026-31609, update to a patched version of the Linux kernel that addresses this vulnerability.
Which versions of the Linux kernel are affected by CVE-2026-31609?
CVE-2026-31609 affects Linux kernel versions below 6.18.24, between 6.19 and 6.19.14, and between 7.0 and 7.0.1.
What component of the Linux kernel is impacted by CVE-2026-31609?
CVE-2026-31609 impacts the SMB client component of the Linux kernel, specifically related to memory management.
Are there any known exploits for CVE-2026-31609?
As of now, there are no publicly known exploits specifically targeting CVE-2026-31609.