CVE-2026-31693

cifs: some missing initializations on replay

State: Published
Severity: 7.8 High
Published: Apr 30, 2026
Updated: Oct 19, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: some missing initializations on replay

In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary reinitializations of certain local variables before replay.

This change makes sure that these variables get initialized after the label.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-665 Improper Initialization

Affected Products

Product	Versions
LinuxLinux	433042a91f9373241307725b52de573933ffedbf to before c854ab481ece4b3e5f4c2e8b22824f015ff874a5Affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 1d731e512134495e0ef490ade0e4d91dc0d515ecAffected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 7c9ce68192eef14c777cb6ce17155d2eb2431aeaAffected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before c99e160938b627f6f28edee930e8abc157e84386Affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 14f66f44646333d2bfd7ece36585874fd72f8286Affected 6.6.32 to before 6.6.128Affected
LinuxLinux	6.8Affected before 6.8Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

433042a91f9373241307725b52de573933ffedbf to before c854ab481ece4b3e5f4c2e8b22824f015ff874a5Affected
4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 1d731e512134495e0ef490ade0e4d91dc0d515ecAffected
4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 7c9ce68192eef14c777cb6ce17155d2eb2431aeaAffected
4f1fffa2376922f3d1d506e49c0fd445b023a28e to before c99e160938b627f6f28edee930e8abc157e84386Affected
4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 14f66f44646333d2bfd7ece36585874fd72f8286Affected
6.6.32 to before 6.6.128Affected

LinuxLinux

6.8Affected
before 6.8Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.