PT-2026-34966 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31614

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SMB client within the check wsl eas() function. A bounds check incorrectly uses the base pointer of the extended attribute (EA) instead of the ea data field, which is offset by 8 bytes. This off-by-8 error allows an untrusted server to cause the system to read past the end of the input/output vector (iov), potentially leaking up to 8 bytes of kernel heap memory during the EA name comparison and influencing how WSL extended attributes (xattr) are interpreted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31614

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://git.kernel.org/stable/c/ba3ad159aa61810bbe0acaf39578b1ebfb6f1a18 · Patch
• https://git.kernel.org/stable/c/5cc0574c84aa73946ade587c41e81757b8b01cb5 · Patch
• https://git.kernel.org/stable/c/bfbc74df8bbe095b3ed68f6d4487b368af087890 · Patch
• https://git.kernel.org/stable/c/a893f1757d9a4009e4a8d7ceb2312142fe29cea4 · Patch
• https://git.kernel.org/stable/c/3d8b9d06bd3ac4c6846f5498800b0f5f8062e53b · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31614 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31614 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31614 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31614 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31614 · Vendor Advisory
• https://git.kernel.org/stable/c/b2b76d09a64c538c57006180103fc1841e8cfa66 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31614 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31614 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31601 · Note