CVE-2026-31610
kernel: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · June 28, 2026
Description
A flaw was found in ksmbd, a component of the Linux kernel. A remote, unauthenticated attacker could exploit a flaw in the SPNEGO (Simple and Protected GSSAPI Negotiation Mechanism) decode process. This could lead to a memory leak, potentially causing a Denial of Service (DoS) on the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime