What’s Vulnerable › Vulnerabilities

CVE-2026-31536: smb: server: let send_done handle a completion without IB_SEND_SIGNALED

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: smb: server: let send_done handle a completion without IB_SEND_SIGNALED With smbdirect_send_batch processing we likely have requests without IB_SEND_SIGNALED, which will be destroyed in the final request that has IB_SEND_SIGNALED set. If the connection is broken all requests are signaled even without explicit IB_SEND_SIGNALED.

Affected products

• Linux kernel: from 5.15 before 6.18.11; from 6.19 before 6.19.1 — fixed in 6.18.11, 6.19.1

How to fix

Upgrade to a fixed version: Linux kernel 6.18.11, 6.19.1. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/24082642654f3e5149913946e89c00a297a8868f
• https://git.kernel.org/stable/c/9da82dc73cb03e85d716a2609364572367a5ff47
• https://git.kernel.org/stable/c/e38b415c024bc3b6321bf8650dbf3f4aab8e74b3

Get alerted when CVE-2026-31536 or the next vulnerability affects your stack