Heap Allocation Vulnerability in Linux Kernel's ksmbd with Potential for Denial of Service

CVE-2026-31706

What is CVE-2026-31706?

The Linux kernel's ksmbd implementation has a vulnerability where it improperly validates the number of Access Control Entries (ACEs) specified in its inheritance mechanism. This issue occurs when an authenticated client can manipulate the security descriptor's NTACL, leading to excessive heap allocations. A tampered ACE count can prompt a substantial but partially populated memory allocation, potentially triggering a denial of service through resource exhaustion. By enhancing validation checks and ensuring safe memory allocation practices, this vulnerability has been mitigated, safeguarding users from potential exploits.

References