Search: CVE-2026-31613

CVE-2026-31613 is a high-severity vulnerability in the Linux kernel SMB client that allows out-of-bounds (OOB) reads when parsing symlink error responses. The flaw arises from improper length validation in smb2_check_message() and incorrect bounds checking in smb2_parse_symlink_response(), which can cause heap memory beyond allocated buffers to be read and returned to userspace. This issue affects Linux kernel versions 6.0.16 up to but not including 6.1, and version 6.1 exactly. The vulnerability has been fixed in Linux kernel 6.1 and later commits.