CVE-2026-31706

kernel: ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client can exploit this vulnerability by manipulating the num_aces value within the parent directory's security.NTACL extended attribute. This manipulation causes ksmbd to attempt an excessively large heap allocation, which can lead to a Denial of Service (DoS) by exhausting available memory resources.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input