CVE-2026-31608

kernel: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Server Message Block (SMB) server component. This vulnerability, a double-free error, occurs when the smb_direct_free_sendmsg function is called redundantly after smb_direct_flush_send_list() has already executed it. A remote attacker could potentially exploit this flaw, leading to memory corruption and a denial of service (DoS) on the affected system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1341 · Multiple Releases of Same Resource or Handle