CVE-2026-31693

A flaw was found in the Linux kernel's Common Internet File System (cifs) component. This vulnerability occurs when certain local variables are not properly reinitialized during the replay of a request. This oversight can lead to unexpected system behavior or instability, potentially resulting in a denial of service (DoS).

Red Hat recognizes this upstream CIFS client fix for incomplete replay-path initialization. Incorrect replay bookkeeping can corrupt SMB session state and harm integrity or availability for mounted shares. Customers should install corrected kernels through their product errata.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the cifs module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.