CVE-2026-31409 ksmbd: unset conn->binding on failed binding request

🗓️ 06 Apr 2026 07:38:21Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Linux kernel ksmbd fixes binding state by clearing conn->binding on failed SMB2 session binding requests.

Reporter	Title	Published	Views	Family All 32
ATTACKERKB	CVE-2026-31409	6 Apr 202607:38	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.	9 Apr 202600:00	–	bdu_fstec
Circl	CVE-2026-31409	6 Apr 202610:03	–	circl
CNNVD	Linux kernel 安全漏洞	6 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31409	6 Apr 202607:38	–	cve
Cvelist	CVE-2026-31409 ksmbd: unset conn->binding on failed binding request	6 Apr 202607:38	–	cvelist
Debian	[SECURITY] [DLA 4561-1] linux-6.1 security update	2 May 202608:40	–	debian
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian	[SECURITY] [DSA 6243-1] linux security update	1 May 202619:10	–	debian

Source	Link
git	www.git.kernel.org/stable/c/282343cf8a4a5a3603b1cb0e17a7083e4a593b03
git	www.git.kernel.org/stable/c/6260fc85ed1298a71d24a75d01f8b2e56d489a60
git	www.git.kernel.org/stable/c/6ebef4a220a1ebe345de899ebb9ae394206fe921
git	www.git.kernel.org/stable/c/7e8b270813079c785696bce8802a3f920665c88c
git	www.git.kernel.org/stable/c/89afe5e2dbea6e9d8e5f11324149d06fa3a4efca
git	www.git.kernel.org/stable/c/9feb2d1bf86d9e5e66b8565f37f8d3a7d281a772
git	www.git.kernel.org/stable/c/d073870dab8f6dadced81d13d273ff0b21cb7f4e
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31409.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31409
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:49Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.18.8

EPSS0.00454