CVE-2026-31614

A flaw was found in the Linux kernel's Server Message Block (SMB) client. An untrusted server can exploit an out-of-bounds read vulnerability within the check_wsl_eas() function. This flaw allows the server to read up to 8 bytes beyond the intended memory boundary, leading to information disclosure. The leaked kernel memory could potentially disclose sensitive data and influence the interpretation of Windows Subsystem for Linux (WSL) extended attributes.

An off-by-eight bounds check when parsing WSL-style EAs could let a malicious server read adjacent client memory. Red Hat advises treating this as SMB client parser hardening; install updates. cifs unload remains the coarse mitigation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cifs module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.