CVE-2026-31613 - Vulnerability Analysis

Overview

Linux kernel smb client contains an out-of-bounds read vulnerability caused by improper length validation when parsing symlink error responses in smb2_check_message and smb2_parse_symlink_response, letting untrusted SMB servers cause memory reads beyond buffer limits, exploit requires interaction with a malicious SMB server.

Severity & Score

Impact

An attacker controlling an SMB server can cause out-of-bounds reads, potentially leaking kernel memory contents to userspace.

Mitigation

Update to the latest Linux kernel version containing the fix for this vulnerability.

References

• https://git.kernel.org/stable/c/781902e069f4ecb6c3b83502f181972c1446110a
• https://git.kernel.org/stable/c/a66ef2e7ed837325c5600f8617d5ee0a0a149fdd
• https://git.kernel.org/stable/c/e0dd90d14cbbf318157ea8e3fb62ee68a28655ed
• https://git.kernel.org/stable/c/3df690bba28edec865cf7190be10708ad0ddd67e

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner