CVE-2026-31538
kernel: smb: server: make use of smbdirect_socket.recv_io.credits.available
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's Server Message Block (SMB) direct server. A race condition exists in the logic responsible for managing receive credits. This occurs because the system's method of counting posted receive input/output (recv_io) and granted credits is susceptible to timing issues. Consequently, the server may grant credits that have already been consumed by the peer, leading to incorrect credit management and potential instability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-821 · Incorrect Synchronization