CVE-2026-31711
kernel: smb: server: fix active_num_conn leak on transport allocation failure
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's ksmbd server. An unauthenticated remote attacker can exploit this by holding open connections with large data lengths, leading to a leak of connection resources. This resource exhaustion can prevent new legitimate connections from being established, resulting in a Denial of Service (DoS) for the ksmbd server.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-911 · Improper Update of Reference Count