CVE-2026-31710 Details
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix dir separator in SMB1 UNIX mounts When calling cifs_mount_get_tcon() with SMB1 UNIX mounts, @cifs_sb->mnt_cifs_flags needs to be read or updated only after calling reset_cifs_unix_caps(), otherwise it might end up with missing CIFS_MOUNT_POSIXACL and CIFS_MOUNT_POSIX_PATHS bits. This fixes the wrong dir separator used in paths caused by the missing CIFS_MOUNT_POSIX_PATHS bit in cifs_sb_info::mnt_cifs_flags.
A vulnerability in the Linux kernel's CIFS (Common Internet File System) implementation for SMB1 UNIX mounts has been addressed. The issue arose because the CIFS mount context flags were not properly updated before resetting UNIX capabilities, leading to the absence of crucial POSIX-related flags. This omission caused incorrect directory separators in file paths. The vulnerability affected several versions of the Linux kernel that are part of the stable release.
Users can upgrade to the latest version of the Linux kernel to address this vulnerability. The patched version is included in the official Linux kernel stable releases.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/c4d3fc5844d685441befd0caaab648321013cdfd | kernel.org | Patch |
| https://git.kernel.org/stable/c/fbbfcf35e1ee3396631f3dc6214cb626aa9814c3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 7.0.1, < 7.0.2 7.0 - 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 21, 2026 | CVE Modified | kernel.org |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | New CVE Received | kernel.org |