CVE-2026-31609 - Vulnerability Analysis

Overview

Linux kernel contains a double-free vulnerability caused by calling smbd_free_send_io() twice in SMB client code, letting attackers cause denial of service via memory corruption, exploit requires crafted SMB requests.

Severity & Score

Impact

Attackers can cause denial of service by triggering memory corruption through double-free.

Mitigation

Update to the latest Linux kernel version containing the fix.

References

• https://git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c
• https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be
• https://git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107
• https://git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner