Linux Kernel Vulnerability in ksmbd Affects SMB File Operations

CVE-2026-31433

What is CVE-2026-31433?

A vulnerability in the Linux kernel's ksmbd component can lead to potential out-of-bounds writes during SMB file operations. Specifically, when processing a compound request that includes QUERY_DIRECTORY and QUERY_INFO commands, a lack of validation for the OutputBufferLength allows for unsafe copying of filenames into the smb2_file_all_info structure. This oversight could result in buffer overflows or memory corruption during the smbConvertToUTF16 conversion process. The remedy involves accurate buffer size calculation and implementing validation checks to prevent exploitation.

References