CVE-2026-31717

kernel: ksmbd: validate owner of durable handle on reconnect

Loading…

Severity

Important

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · October 20, 2026

Description

A flaw was found in ksmbd, a component of the Linux kernel. This vulnerability allows an authenticated user to hijack an orphaned durable handle by predicting or brute-forcing its persistent ID. This could lead to unauthorized access to file sessions and potentially sensitive data or services.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-708 · Incorrect Ownership Assignment