CVE-2026-31539

A flaw was found in the Linux kernel's smbdirect module. A race condition in the receive credit management logic allows the system to grant credits that a peer has already consumed. This timing vulnerability, occurring during the processing of incoming data, could lead to resource exhaustion and potentially result in a denial of service (DoS) condition.

This vulnerability is rated Moderate because exploitation requires an established SMB Direct session over RDMA-capable networking, restricting the potential impact to denial of service without permitting unauthorized code execution. SMB Direct is not enabled or utilized by default in standard Red Hat Enterprise Linux deployments and requires explicit administrator configuration alongside compatible RDMA hardware. Consequently, systems not actively running SMB over RDMA transports are not exposed to this race condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.