CVE-2026-31609 smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()

🗓️ 24 Apr 2026 14:42:30Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

CVE-2026-31609: smb client avoids double-free after batch flush by not freeing after post send

Reporter	Title	Published	Views	Family All 40
attackerkb	CVE-2026-31609	24 Apr 202614:42	–	attackerkb
nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1746)	27 May 202600:00	–	nessus
nessus	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8488-1)	3 Jul 202600:00	–	nessus
nessus	Ubuntu 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8507-1)	7 Jul 202600:00	–	nessus
nessus	Linux Distros Unpatched Vulnerability : CVE-2026-31609	27 Apr 202600:00	–	nessus
astralinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
cbl_mariner	CVE-2026-31609 affecting package kernel for versions less than 6.6.134.1-2	3 May 202620:52	–	cbl_mariner
cgr	CVE-2026-31609 vulnerabilities	16 May 202601:18	–	cgr
circl	CVE-2026-31609	2 Jul 202605:49	–	circl
cnnvd	Linux kernel 安全漏洞	24 Apr 202600:00	–	cnnvd

Source	Link
git	www.git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107
git	www.git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be
git	www.git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607
git	www.git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31609.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-31609
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:49Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.19.8

EPSS0.00457

smb client double free batch flush post send send batch flush linux kernel