CVE-2026-31478

kernel: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 22, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd within the Linux kernel. This vulnerability occurs due to an incorrect calculation of the response buffer length in the smb2_calc_max_out_buf_len() function. The function used a hardcoded value instead of the proper offset, which could lead to issues in how response buffers are managed.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size