Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-31610

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc The kernel ASN.1 BER decoder calls action callbacks incrementally as it walks the input. When ksmbd_decode_negTokenInit() reaches the mechToken [2] OCTET STRING element, ksmbd_neg_token_alloc() allocates conn->mechToken immediately via kmemdup_nul(). If a later element in the same blob is malformed, then the decoder will return nonzero after the allocation
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e977d8ed2b9c37f39eadeb798307af142e595f6f66c47cedeb489853af5450d0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/connection.c","fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ae9cdb29efed20ffdee9ff3b0bb72fb369c353da","status":"affected","version":"fad4161b5cd01a24202234976ebbb133f7adc0b5","versionType":"git"},{"lessThan":"bd4a7fb04f06f419b0e93d8b52fe32067eb312d1","status":"affected","version":"fad4161b5cd01a24202234976ebbb133f7adc0b5","versionType":"git"},{"lessThan":"745a535461bbb90a56d9357573c9f97a5c12abe1","status":"affected","ver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/connection.c","fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","ver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/connection.c","fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ae9cdb29efed20ffdee9ff3b0bb72fb369c353da","status":"affected","version":"fad4161b5cd01a24202234976ebbb133f7adc0b5","versionType":"git"},{"lessThan":"bd4a7fb04f06f419b0e93d8b52fe32067eb312d1","status":"affected","version":"fad4161b5cd01a24202234976ebbb133f7adc0b5","versionType":"git"},{"lessThan":"745a535461bbb90a56d9357573c9f97a5c12abe1","status":"affected","ver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/connection.c","fs/smb/server/smb2pdu.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.136","ver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/269c800a7a7e363459291885b35f7bc72e231ed6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/6c8c44e6553b9f072f62d9875e567766eb293162"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/745a535461bbb90a56d9357573c9f97a5c12abe1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ad0057fb91218914d6c98268718ceb9d59b388e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/ae9cdb29efed20ffdee9ff3b0bb72fb369c353da"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/bd4a7fb04f06f419b0e93d8b52fe32067eb312d1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/dd53414e301beb915fe672dc4c4a51bafb917604"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/dd577cb55588ec3fbc66af3621280306601c4192"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9bade23fec618f312b93e13da69125611e114c0e98440022330e169c5de68c74 · sha256:47381411cad8a820… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer