CVE Database›Document archive›CVE-2026-31432

CVE-2026-31432

kernel: ksmbd: fix OOB write in QUERY_INFO for compound requests

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 22, 2026

Updated · October 20, 2026

Description

A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to cause the system to write data beyond its intended memory boundaries when processing specific network requests. Specifically, when a complex request combines data reading with security information queries, the system might miscalculate the required buffer size. This out-of-bounds write could lead to system instability, a denial of service, or potentially allow an attacker to execute malicious code.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size