CVE-2026-31613

A flaw was found in the Linux kernel's Server Message Block (SMB) client. A remote, untrusted server could send a specially crafted symlink error response, leading to an out-of-bounds read vulnerability. This could result in the disclosure of sensitive information from the kernel's memory to a local user through the readlink(2) system call.

This vulnerability is rated as Moderate severity because exploitation requires an affected client to connect to a malicious or compromised SMB server, limiting the blast radius to environments interacting with untrusted network shares. While an attacker controlling an SMB share can trigger an out-of-bounds read by returning malformed error structures during symbolic link traversal, enterprise deployments do not mount untrusted shares by default. The issue can expose uninitialized kernel heap data to local processes or cause a denial of service, but it does not facilitate arbitrary code execution or state alteration.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.