SECUFOCUSNOW
Home›CVE index›CVE-2026-31409
Review reviewHigh

CVE-2026-31409

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true but never clears it on the error path. This leaves the connection in a binding state where all subsequent ksmbd_session_lookup_all() calls fall back to the global sessions table. This fix it by clearing conn->binding = false in the error path.

CVSS
8.8
EPSS
0.45%
37.2% percentile
CISA KEV
Not listed
Published
2026.04.06
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.45%
Technical severityCVSS 8.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true but never clears it on the error path. This leaves the connection in a binding state where all subsequent ksmbd_session_lookup_all() calls fall back to the global sessions table. This fix it by clearing conn->binding = false in the error path.

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= f5a544e3bab78142207e0242d22442db85ba1eff < 7e8b270813079c785696bce8802a3f920665c88c, >= f5a544e3bab78142207e0242d22442db85ba1eff < d073870dab8f6dadced81d13d273ff0b21cb7f4e, >= f5a544e3bab78142207e0242d22442db85ba1eff < 6ebef4a220a1ebe345de899ebb9ae394206fe921, >= f5a544e3bab78142207e0242d22442db85ba1eff < 89afe5e2dbea6e9d8e5f11324149d06fa3a4efca, >= f5a544e3bab78142207e0242d22442db85ba1eff < 9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772, >= f5a544e3bab78142207e0242d22442db85ba1eff < 6260fc85ed1298a71d24a75d01f8b2e56d489a60, >= f5a544e3bab78142207e0242d22442db85ba1eff < 282343cf8a4a5a3603b1cb0e17a7083e4a593b03, >= 5.15, >= 5.15 < 6.1.167, >= 6.2 < 6.6.130, >= 6.7 < 6.12.78, >= 6.13 < 6.18.20, >= 6.19 < 6.19.10, 7.0
Fixed versions
6.1.167, 6.6.130, 6.12.78, 6.18.20, 6.19.10

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available