Riskcovery

CVE-2026-31409

ksmbd: unset conn->binding on failed binding request

State
Published
Severity
8.8 High
Published
Apr 6, 2026
Updated
Aug 5, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: unset conn->binding on failed binding request

When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true but never clears it on the error path. This leaves the connection in a binding state where all subsequent ksmbd_session_lookup_all() calls fall back to the global sessions table. This fix it by clearing conn->binding = false in the error path.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 7e8b270813079c785696bce8802a3f920665c88cAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before d073870dab8f6dadced81d13d273ff0b21cb7f4eAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 6ebef4a220a1ebe345de899ebb9ae394206fe921Affected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 89afe5e2dbea6e9d8e5f11324149d06fa3a4efcaAffected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772Affected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 6260fc85ed1298a71d24a75d01f8b2e56d489a60Affected
  • f5a544e3bab78142207e0242d22442db85ba1eff to before 282343cf8a4a5a3603b1cb0e17a7083e4a593b03Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.20 through 6.18.*Not affected
  • 6.19.10 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.