PT-2026-34961 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31609

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the SMB client. The function smbd send batch flush() already invokes smbd free send io(), leading to a second call to smbd free send io() after smbd post send() moves an item to the batch list.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-31609

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 73

• https://git.kernel.org/stable/c/22b7c1c619d808aec4cad3dc42103345e370d107 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31609 · Security Note
• https://git.kernel.org/stable/c/27b7c3e916218b5eb2ee350211140e961bfc49be · Patch
• https://git.kernel.org/stable/c/a9940dcbe5cb92482c04efc7341039ddf7dbf607 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31609 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31609 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31609 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f9a162c2bbcd0ac85bd07c5b37cf20286048b65c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31609 · Security Note
• https://ubuntu.com/security/CVE-2026-31609 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31599 · Note
• https://suse.com/security/cve/CVE-2026-31610 · Note
• https://suse.com/security/cve/CVE-2026-31628 · Note
• https://suse.com/security/cve/CVE-2026-31619 · Note