smb: server: make use of smbdirect_socket.recv_io.credits.available_CVE-2026-31538

{
    "lastseen": "",
    "description": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: server: make use of smbdirect_socket.recv_io.credits.available\n\nThe logic off managing recv credits by counting posted recv_io and\ngranted credits is racy.\n\nThat's because the peer might already consumed a credit,\nbut between receiving the incoming recv at the hardware\nand processing the completion in the 'recv_done' functions\nwe likely have a window where we grant credits, which\ndon't really exist.\n\nSo we better have a decicated counter for the\navailable credits, which will be incremented\nwhen we posted new recv buffers and drained when\nwe grant the credits to the peer.\n\nThis fixes regression Namjae reported with\nthe 6.18 release.",
    "published": "2026-04-24T14:30:25.598Z",
    "modified": "2026-04-27T14:03:56.999Z",
    "type": "cve",
    "title": "smb: server: make use of smbdirect_socket.recv_io.credits.available",
    "source": "Linux",
    "references": "https://git.kernel.org/stable/c/66c082e3d4651e8629a393a9e182b01eb50fb0a3\nhttps://git.kernel.org/stable/c/809cbd31aa4f87a1b889532244c9cf30eb022385\nhttps://git.kernel.org/stable/c/26ad87a2cfb8c1384620d1693a166ed87303046e",
    "id": "CVE-2026-31538",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Linux Linux 89b021a72663c4d96d8a8b85272bb42d991a1c6f\nLinux Linux 89b021a72663c4d96d8a8b85272bb42d991a1c6f\nLinux Linux 89b021a72663c4d96d8a8b85272bb42d991a1c6f\nLinux Linux 6.18",
    "sourceHref": "",
    "cvss": {
        "score": 7.5,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Linux",
    "version": "89b021a72663c4d96d8a8b85272bb42d991a1c6f",
    "vendor": "Linux",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}