CVE-2026-31718 - Vulnerability Analysis

Overview

Linux kernel contains a use-after-free vulnerability in ksmbd __ksmbd_close_fd() caused by improper cleanup of byte-range locks on durable file handles after session disconnect, letting attackers cause memory corruption, exploit requires durable file handle usage.

Severity & Score

Impact

Attackers can cause memory corruption leading to potential denial of service or code execution.

Mitigation

Update to the latest Linux kernel version containing the fix for ksmbd use-after-free.

References

• https://git.kernel.org/stable/c/235e32320a470fcd3998fb3774f2290a0eb302a1
• https://git.kernel.org/stable/c/3d6682726c2d3a46d31dae88b8166786b09b03ad
• https://git.kernel.org/stable/c/b34fc42cfe922e551f7a27d3ac3bb016e41d7dd9
• https://git.kernel.org/stable/c/e33c65f011980b4ad4abfd93585ec2079856368f

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner