CVE-2026-31535

smb: client: make use of smbdirect_socket.recv_io.credits.available

published April 24, 2026

CVSS
—
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

smb: client: make use of smbdirect_socket.recv_io.credits.available

The logic off managing recv credits by counting posted recv_io and

granted credits is racy.

That's because the peer might already consumed a credit,

but between receiving the incoming recv at the hardware

and processing the completion in the 'recv_done' functions

we likely have a window where we grant credits, which

don't really exist.

So we better have a decicated counter for the

available credits, which will be incremented

when we posted new recv buffers and drained when

we grant the credits to the peer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Published
2026-04-24T14:30Z
EPSS history
Timeline
  • 24 APR 14:30Z
    smb: client: make use of smbdirect_socket.recv_io.credits.available
    cvelistv5