PT-2026-36340 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-16 · CVE-2026-31710

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SMB client during SMB1 UNIX mounts. When the cifs mount get tcon() function is called, the cifs sb->mnt cifs flags variable may be read or updated before the reset cifs unix caps() function is executed. This sequence can lead to the omission of the CIFS MOUNT POSIXACL and CIFS MOUNT POSIX PATHS bits within cifs sb info::mnt cifs flags, resulting in the use of an incorrect directory separator in paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31710

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 44

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31710 · Vendor Advisory
• https://git.kernel.org/stable/c/c4d3fc5844d685441befd0caaab648321013cdfd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31710 · Security Note
• https://ubuntu.com/security/CVE-2026-31710 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://git.kernel.org/stable/c/fbbfcf35e1ee3396631f3dc6214cb626aa9814c3 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31710 · Security Note
• https://suse.com/security/cve/CVE-2026-43073 · Note
• https://suse.com/security/cve/CVE-2026-43348 · Note
• https://suse.com/security/cve/CVE-2026-31697 · Note
• https://suse.com/security/cve/CVE-2026-31704 · Note
• https://suse.com/security/cve/CVE-2026-43500 · Note
• https://suse.com/security/cve/CVE-2026-31719 · Note
• https://suse.com/security/cve/CVE-2026-31714 · Note
• https://suse.com/security/cve/CVE-2026-43058 · Note