Integer Overflow Vulnerability in Linux Kernel's ksmbd Component

CVE-2026-31707

What is CVE-2026-31707?

A vulnerability exists in the Linux kernel's ksmbd component where improper validation of response sizes can lead to integer overflow. Specifically, the ipc_validate_msg() function incorrectly computes expected message sizes for RPC requests, share configurations, and login requests. This flaw could allow attackers to manipulate message sizes, bypassing essential size checks and potentially leading to memory corruption and exploitation in downstream processes. To mitigate risks, it is crucial to implement size checks using check_add_overflow() for the relevant requests while ensuring lengths are verified comprehensively at the IPC boundary.

References