Memory Management Flaw in Linux Kernel's SMB server

CVE-2026-31711

What is CVE-2026-31711?

A vulnerability in the Linux Kernel's SMB server allows an unauthenticated remote attacker to exploit a memory leak during transport allocation failures. When the system attempts to create new connections, a failure in allocating transport can leave active connection counters improperly incremented. This leak can be exploited by maintaining open connections with large RFC1002 lengths, eventually exhausting the maximum connection slots. As a result, legitimate connection attempts may be rejected, leading to disruption. The vulnerability has been addressed in a patch that ensures proper decrementing of connection counters on allocation failures, restoring normal connection acceptance behavior.

References