Missing Release of Resource after Effective Lifetime in Linux kernel - CVE-2026-31711
Published: May 2, 2026
Vulnerability identifier: #VU128978
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2026-31711
CWE-ID: CWE-772
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to improper resource management in ksmbd_tcp_new_connection() when handling TCP connections that trigger transport allocation failure. A remote attacker can hold open connections with large RFC1002 lengths to cause a denial of service.
The issue is reachable pre-authentication over TCP port 445, and repeated allocation failures can exhaust the connection slot counter until subsequent connection attempts are rejected for the remainder of the boot.
How to mitigate CVE-2026-31711
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/283027aa93380380a0994f35dde3ec95318f2654
- https://git.kernel.org/stable/c/295a9fc6789d1011c36ded9f0f2907bb34fa0de4
- https://git.kernel.org/stable/c/6551300dc452ac16a855a83dbd1e74899542d3b3
- https://git.kernel.org/stable/c/97f8d2648ef4871e4cd335e2d769cb40054a6772
- https://git.kernel.org/stable/c/fb48185bcd946d42de7017cf27f912f8ab26acf0