CVE-2026-31444 ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()

🗓️ 22 Apr 2026 13:53:41Reported by GoogleType

osv🔗 osv.dev👁 1 Views

ksmbd fixes use-after-free and NULL dereference in smb_grant_oplock by reordering publication and preallocating lease table.

Reporter	Title	Published	Views	Family All 21
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
CBLMariner	CVE-2026-31444 affecting package kernel for versions less than 6.6.134.1-2	3 May 202620:52	–	cbl_mariner
CNNVD	Linux kernel 安全漏洞	22 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31444	22 Apr 202613:53	–	cve
Cvelist	CVE-2026-31444 ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()	22 Apr 202613:53	–	cvelist
Debian CVE	CVE-2026-31444	22 Apr 202613:53	–	debiancve
EUVD	EUVD-2026-24776	22 Apr 202615:31	–	euvd
Mageia	Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities	4 May 202616:05	–	mageia
Mageia	Updated kernel-linus packages fix security vulnerabilities	7 May 202605:06	–	mageia
Microsoft CVE	ksmbd: fix use-after-free and NULL deref in smb_grant_oplock()	23 Apr 202608:08	–	mscve

Source	Link
git	www.git.kernel.org/stable/c/48623ec358c1c600fa1e38368746f933e0f1a617
git	www.git.kernel.org/stable/c/6d7e5a918c1d0aad06db0e17677b66fc9a471021
git	www.git.kernel.org/stable/c/7de55bba69cbf0f9280daaea385daf08bc076121
git	www.git.kernel.org/stable/c/9e785f004cbc56390479b77375726ea9b0d1a8a6
git	www.git.kernel.org/stable/c/a5c6f6d6ceefed2d5210ee420fb75f8362461f46
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31444.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31444
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:48Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.8

EPSS0.0045