Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31409

In the Linux kernel, the following vulnerability has been resolved: ksmbd: unset conn->binding on failed binding request When a multichannel SMB2_SESSION_SETUP request with SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn->binding = true but never clears it on the error path. This leaves the connection in a binding state where all subsequent ksmbd_session_lookup_all() calls fall back to the global sessions table. This fix it by clearing conn->binding = false in the error path.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:844844f971e6df373d57284d8f103cd28b3c9b70e5d0e29434524933e23dfacd
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7e8b270813079c785696bce8802a3f920665c88c","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"d073870dab8f6dadced81d13d273ff0b21cb7f4e","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"6ebef4a220a1ebe345de899ebb9ae394206fe921","status":"affected","version":"f5a544e3bab78142207e02…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.130","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7e8b270813079c785696bce8802a3f920665c88c","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"d073870dab8f6dadced81d13d273ff0b21cb7f4e","status":"affected","version":"f5a544e3bab78142207e0242d22442db85ba1eff","versionType":"git"},{"lessThan":"6ebef4a220a1ebe345de899ebb9ae394206fe921","status":"affected","version":"f5a544e3bab78142207e02…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/282343cf8a4a5a3603b1cb0e17a7083e4a593b03"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6260fc85ed1298a71d24a75d01f8b2e56d489a60"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/6ebef4a220a1ebe345de899ebb9ae394206fe921"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7e8b270813079c785696bce8802a3f920665c88c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/89afe5e2dbea6e9d8e5f11324149d06fa3a4efca"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d073870dab8f6dadced81d13d273ff0b21cb7f4e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:eba99185c79e66ce66f528e129bd10b36e920ac83af9c4933942685576b938a2 · sha256:03d0708d29e9dd56… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer