CVE-2026-31535

A flaw was found in the Linux kernel. A race condition exists in the SMB client's receive credit management, specifically in how smbdirect_socket.recv_io.credits.available are handled. This could lead to incorrect credit allocation, potentially causing instability or unexpected behavior within the system.

This flaw concerns SMB Direct credit accounting in the CIFS client; races could corrupt credits and destabilize I/O. Red Hat aligns with upstream MODERATE handling and will ship the fix via kernel maintenance. Workloads using SMB multichannel/Direct should plan for updates.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cifs module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.