Linux Kernel Vulnerability Affecting Volume UUID in KSMBD Functionality

CVE-2026-31410

What is CVE-2026-31410?

The Linux kernel has a vulnerability in its ksmbd module where it improperly retrieves volume identifiers. The module should primarily use the volume UUID to ensure accurate identification. In cases where a UUID is unavailable, the system can utilize an alternative identifier obtained from vfs_statfs(). This flaw could potentially lead to issues in file system operations and data integrity, necessitating prompt updates to mitigate risks.

References