CVE-2026-31538
HIGH EPSS 34.2%
Published Apr 24, 20262mo ago · Modified Jun 17, 20262w ago
7.5 CVSS 3.1
Published Apr 24, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago
Description
In the Linux kernel, the following vulnerability has been resolved: smb: server: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv credits by counting posted recv_io and granted credits is racy. That's because the peer might already consumed a credit, but between receiving the incoming recv at the hardware and processing the completion in the 'recv_done' functions we likely have a window where we grant credits, which don't really exist. So we better have a decicated counter for the available credits, which will be incremented when we posted new recv buffers and drained when we grant the credits to the peer. This fixes regression Namjae reported with the 6.18 release.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
EPSS Exploit Probability
34.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Affected Products 2
References 3
- git.kernel.org https://git.kernel.org/stable/c/26ad87a2cfb8c1384620d1693a166ed87303046e
- git.kernel.org https://git.kernel.org/stable/c/66c082e3d4651e8629a393a9e182b01eb50fb0a3
- git.kernel.org https://git.kernel.org/stable/c/809cbd31aa4f87a1b889532244c9cf30eb022385
Remediation
- git.kernel.org https://git.kernel.org/stable/c/26ad87a2cfb8c1384620d1693a166ed87303046e
- git.kernel.org https://git.kernel.org/stable/c/66c082e3d4651e8629a393a9e182b01eb50fb0a3
- git.kernel.org https://git.kernel.org/stable/c/809cbd31aa4f87a1b889532244c9cf30eb022385