CVE Database›Document archive›CVE-2026-31538

CVE-2026-31538

kernel: smb: server: make use of smbdirect_socket.recv_io.credits.available

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Server Message Block (SMB) direct server. A race condition exists in the logic responsible for managing receive credits. This occurs because the system's method of counting posted receive input/output (recv_io) and granted credits is susceptible to timing issues. Consequently, the server may grant credits that have already been consumed by the peer, leading to incorrect credit management and potential instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-821 · Incorrect Synchronization