Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-31608

Опубликовано: 24 апр. 2026
Источник: redhat
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already calls smb_direct_free_sendmsg(), so we should not call it again after post_sendmsg() moved it to the batch list.

A flaw was found in the Linux kernel's Server Message Block (SMB) server component. This vulnerability, a double-free error, occurs when the smb_direct_free_sendmsg function is called redundantly after smb_direct_flush_send_list() has already executed it. A remote attacker could potentially exploit this flaw, leading to memory corruption and a denial of service (DoS) on the affected system.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Дефект:
CWE-1341
https://bugzilla.redhat.com/show_bug.cgi?id=2461452kernel: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

EPSS

Процентиль: 37%
0.00457
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already calls smb_direct_free_sendmsg(), so we should not call it again after post_sendmsg() moved it to the batch list.

CVSS3: 9.8
nvd
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already calls smb_direct_free_sendmsg(), so we should not call it again after post_sendmsg() moved it to the batch list.

CVSS3: 7.1
msrc
3 месяца назад

smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

CVSS3: 9.8
debian
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: s ...

CVSS3: 9.8
github
4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list() smb_direct_flush_send_list() already calls smb_direct_free_sendmsg(), so we should not call it again after post_sendmsg() moved it to the batch list.

EPSS

Процентиль: 37%
0.00457
Низкий