CVE-2026-31707
kernel: ksmbd: validate response sizes in ipc_validate_msg()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's ksmbd component. A remote attacker could exploit an integer overflow vulnerability when the system processes specially crafted daemon responses. This manipulation of data sizes can bypass internal security checks, leading to memory corruption. Such an issue could potentially allow an attacker to gain unauthorized access or cause system instability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-131 · Incorrect Calculation of Buffer Size