Home / Vulnerability Intelligence / CVE-2026-31536

CVE-2026-31536 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 27, 2026

Linux Kernel - Denial of Service

Published: April 24, 2026Updated: April 27, 2026Remote Exploitable

Overview

Linux kernel contains a denial of service caused by improper handling of send_done completions without IB_SEND_SIGNALED in smbdirect_send_batch, letting attackers cause connection issues, exploit requires network access.

Severity & Score

Severity: Critical

CVSS Score: 9.8

Impact

Attackers can cause denial of service by breaking connections and triggering improper request handling.

Mitigation

Update to the latest Linux kernel version containing the fix.

References

https://git.kernel.org/stable/c/24082642654f3e5149913946e89c00a297a8868f
https://git.kernel.org/stable/c/9da82dc73cb03e85d716a2609364572367a5ff47
https://git.kernel.org/stable/c/e38b415c024bc3b6321bf8650dbf3f4aab8e74b3

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-31536
Severity: Critical
CVSS Score: 9.8
Type: denial_of_service
Status: unconfirmed

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H