Out-of-Bounds Read Vulnerability in Linux Kernel's SMB Functionality

CVE-2026-31712

What is CVE-2026-31712?

A vulnerability in the Linux kernel's SMB functionality could allow an authenticated attacker with permission to set an Access Control List (ACL) on a file to exploit a weakness in the handling of Access Control Entries (ACEs). This improper validation could result in an out-of-bounds read during the evaluation of ACLs, leading to potential kernel state corruption. The vulnerability arises from checks that inadequately ensure the ACE's size aligns with its declared structure, particularly risking out-of-bounds reads from carefully crafted DACLs. Proper validation measures need to be enforced to avoid exploitation risks.

References