CVE-2026-31609

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31609
In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() smbd_send_batch_flush() already calls smbd_free_send_io(), so we should not call it again after smbd_post_send() moved it to the batch list.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107 Patch
https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be Patch
https://git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607 Patch
https://git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

29 Apr 2026, 16:45

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107 - () https://git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107 - Patch
References () https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be - () https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be - Patch
References () https://git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607 - () https://git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607 - Patch
References () https://git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c - () https://git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c - Patch
First Time Linux
Linux linux Kernel
CWE CWE-415
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

27 Apr 2026, 15:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.8

27 Apr 2026, 12:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be -

24 Apr 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-24 15:16

Updated : 2026-04-29 16:45

NVD link : CVE-2026-31609

Mitre link : CVE-2026-31609

CVE.ORG link : CVE-2026-31609

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free