CVE-2026-31693 Details
Description
In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary reinitializations of certain local variables before replay. This change makes sure that these variables get initialized after the label.
A vulnerability in the Linux kernel's CIFS (Common Internet File System) implementation has been addressed. The issue involved missing initializations of local variables in several code locations where requests could be replayed. This oversight could potentially lead to unintended behavior during the replay process. The vulnerability has been resolved by ensuring that the affected variables are properly initialized before a request is replayed.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/14f66f44646333d2bfd7ece36585874fd72f8286 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1d731e512134495e0ef490ade0e4d91dc0d515ec | kernel.org | Patch |
| https://git.kernel.org/stable/c/7c9ce68192eef14c777cb6ce17155d2eb2431aea | kernel.org | Patch |
| https://git.kernel.org/stable/c/c854ab481ece4b3e5f4c2e8b22824f015ff874a5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c99e160938b627f6f28edee930e8abc157e84386 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.6.32, < 6.6.128 >= 6.8.1, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 6.8 - 6.8 rc2 6.8 rc3 6.8 rc4 6.8 rc5 6.8 rc6 6.8 rc7 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Reanalysis | [email protected] |
| May 6, 2026 | Initial Analysis | [email protected] |
| May 3, 2026 | CVE Modified | kernel.org |
| Apr 30, 2026 | New CVE Received | kernel.org |