← All advisories

Critical severity9.8NVD Advisory· Published Apr 24, 2026· Updated Apr 29, 2026

CVE-2026-31608

CVE-2026-31608

Description

In the Linux kernel, the following vulnerability has been resolved:

smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

smb_direct_flush_send_list() already calls smb_direct_free_sendmsg(), so we should not call it again after post_sendmsg() moved it to the batch list.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

Linux/Kernel
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Range: <6.18.24
osv-coords7 versions
pkg:apk/chainguard/linux-aws-6.18 pkg:apk/chainguard/linux-azure-6.18 pkg:apk/chainguard/linux-gcp-6.18 pkg:apk/chainguard/linux-qemu-6.18 pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installed pkg:apk/chainguard/linux-vmware-6.18 pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
< 6.18.31-r0+ 6 more
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 7.0.3-1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.