In the Linux kernel, the following vulnerability has been resolved:
smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
The logic off managing recv credits by counting posted recv_io and
granted credits is racy.
That's because the peer might already consumed a credit,
but between receiving the incoming recv at the hardware
and processing the completion in the 'recv_done' functions
we likely have a window where we grant credits, which
don't really exist.
So we better have a decicated counter for the
available credits, which will be incremented
when we posted new recv buffers and drained when
we grant the credits to the peer.
References
Configurations
Configuration 1 (hide)
|
History
28 Apr 2026, 18:54
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| References | () https://git.kernel.org/stable/c/6e3c5052f9686192e178806e017b7377155f4bab - Patch | |
| References | () https://git.kernel.org/stable/c/e811e60e1cc79923c4388146eb1fa26a7482731e - Patch | |
| References | () https://git.kernel.org/stable/c/f99996870222b598914a1f49d7375dc23752c237 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| First Time |
Linux
Linux linux Kernel |
27 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
24 Apr 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-24 15:16
Updated : 2026-06-17 10:33
NVD link : CVE-2026-31539
Mitre link : CVE-2026-31539
CVE.ORG link : CVE-2026-31539
JSON object : View
Products Affected
linux
- linux_kernel
CWE