CVE Database›Document archive›CVE-2026-31707

CVE-2026-31707

kernel: ksmbd: validate response sizes in ipc_validate_msg()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's ksmbd component. A remote attacker could exploit an integer overflow vulnerability when the system processes specially crafted daemon responses. This manipulation of data sizes can bypass internal security checks, leading to memory corruption. Such an issue could potentially allow an attacker to gain unauthorized access or cause system instability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-131 · Incorrect Calculation of Buffer Size