CVE-2026-31478

🗓️ 22 Apr 2026 14:16:44Reported by [email protected]Type

Linux kernel ksmbd fix uses offsetof for hdr2_len in smb2_calc_max_out_buf_len after dynamic iov changes.

Reporter	Title	Published	Views	Family All 34
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	3 May 202623:59	–	astralinux
Circl	CVE-2026-31478	22 Apr 202615:11	–	circl
CNNVD	Linux kernel 安全漏洞	22 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31478	22 Apr 202613:54	–	cve
Cvelist	CVE-2026-31478 ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()	22 Apr 202613:54	–	cvelist
Debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian	[SECURITY] [DSA 6243-1] linux security update	1 May 202619:10	–	debian
Debian CVE	CVE-2026-31478	22 Apr 202613:54	–	debiancve
Tenable Nessus	Debian dla-4561 : linux-config-6.1 - security update	2 May 202600:00	–	nessus

NVD

Node

linux linux_kernelRange5.15.145–5.15.203

linux linux_kernelRange6.1.71–6.1.168

linux linux_kernelRange6.6.1–6.6.131

linux linux_kernelRange6.7–6.12.80

linux linux_kernelRange6.13–6.18.21

linux linux_kernelRange6.19–6.19.11

Source	Link
git	www.git.kernel.org/stable/c/80824c7e527b70cf9039534e60aff592e8f209d1
git	www.git.kernel.org/stable/c/70b4c414889492c522b6e4331562360f49be2361
git	www.git.kernel.org/stable/c/9a7166f0ef8cbb7bb48dd05e2471d995566003f5
git	www.git.kernel.org/stable/c/0e55f63dd08f09651d39e1b709a91705a8a0ddcb
git	www.git.kernel.org/stable/c/4cb537ae4f37d7d0f617815ed4bed7173fb50861
git	www.git.kernel.org/stable/c/c3a89e3ec1ccf64fa6a34e391e1581ebbcba8683
git	www.git.kernel.org/stable/c/6aef1765d6807e0f027cd87f6ac973eb0879a46d

17 Jun 2026 10:33Current

CVSS 3.19.8

EPSS0.00502