CVE-2026-31709 - Vulnerability Analysis

Overview

Linux kernel contains an access control list (ACL) validation vulnerability caused by insufficient validation of DACL structure in smb client cifsacl, letting malicious servers cause out-of-bounds reads by sending truncated DACLs, exploit requires interaction with a malicious SMB server.

Severity & Score

Impact

A malicious SMB server can cause out-of-bounds reads, potentially leading to information disclosure or system instability.

Mitigation

Update to the latest Linux kernel version containing the fix for DACL validation.

References

• https://git.kernel.org/stable/c/0a8cf165566ba55a39fd0f4de172119dd646d39a
• https://git.kernel.org/stable/c/b78db9bddc84136f6a0bb49e8883cf200dfb87a8

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner