CVE-2026-31536

smb: server: let send_done handle a completion without IB_SEND_SIGNALED

State: Published
Severity: 9.8 Critical
Published: Apr 24, 2026
Updated: Aug 5, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: server: let send_done handle a completion without IB_SEND_SIGNALED

With smbdirect_send_batch processing we likely have requests without IB_SEND_SIGNALED, which will be destroyed in the final request that has IB_SEND_SIGNALED set.

If the connection is broken all requests are signaled even without explicit IB_SEND_SIGNALED.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0626e6641f6b467447c81dd7678a69c66f7746cf to before 24082642654f3e5149913946e89c00a297a8868fAffected 0626e6641f6b467447c81dd7678a69c66f7746cf to before e38b415c024bc3b6321bf8650dbf3f4aab8e74b3Affected 0626e6641f6b467447c81dd7678a69c66f7746cf to before 9da82dc73cb03e85d716a2609364572367a5ff47Affected
LinuxLinux	5.15Affected before 5.15Not affected 6.18.11 through 6.18.Not affected 6.19.1 through 6.19.Not affected 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.