CVE-2026-31432
kernel: ksmbd: fix OOB write in QUERY_INFO for compound requests
Loading…
Severity
ImportantRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 22, 2026
Updated · October 20, 2026
Description
A flaw was found in the ksmbd component of the Linux kernel. This vulnerability allows an attacker to cause the system to write data beyond its intended memory boundaries when processing specific network requests. Specifically, when a complex request combines data reading with security information queries, the system might miscalculate the required buffer size. This out-of-bounds write could lead to system instability, a denial of service, or potentially allow an attacker to execute malicious code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-131 · Incorrect Calculation of Buffer Size