CVE-2026-31693 HIGH

CVE-2026-31693: cifs: some missing initializations on replay

Vendor Linux
Product Linux
Published April 30, 2026
Last update May 23, 2026

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary reinitializations of certain local variables before replay. This change makes sure that these variables get initialized after the label.

Key dates

02Disclosure timeline

April 30, 2026 CVE published
May 23, 2026 Record updated