PT-2026-34276 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-26 · CVE-2026-31433

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the ksmbd component within the get file all info() function during the processing of compound requests consisting of QUERY DIRECTORY and QUERY INFO (FILE ALL INFORMATION). When the first command consumes most of the max trans size, the system may call smbConvertToUTF16() with PATH MAX without validating the client-provided OutputBufferLength. If the filename length exceeds the available buffer space, it can lead to memory corruption or buffer overflows during the conversion process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31433

ECHO-4E3B-E942-B33F

Affected Products

Linux Kernel

References · 22

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31433 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31433 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31433 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31433 · Security Note
• https://ubuntu.com/security/CVE-2026-31433 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31433 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31433 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31433 · Vendor Advisory
• https://git.kernel.org/linus/beef2634f81f1c086208191f7228bce1d366493d · Note
• https://git.kernel.org/stable/c/beef2634f81f1c086208191f7228bce1d366493d · Note
• https://git.kernel.org/stable/c/3a852f9d1c981fb14f6bf4e24999e0ea8088a7d7 · Note
• https://git.kernel.org/stable/c/358cdaa1f7fbf2712cb4c5f6b59cb9a5c673c5fe · Note
• https://twitter.com/VulmonFeeds/status/2046963547234542048 · Twitter Post
• https://git.kernel.org/stable/c/4cca3eff2099b18672934a39cee70aed835d652c · Note
• https://git.kernel.org/stable/c/b0cd9725fe2bcc9f37d096b132318a9060373f5d · Note