CVE-2026-31410

MediumCVSS 5.5

Published: 06/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Fix in the Linux kernel for ksmbd: uses volume UUID in FS_OBJECT_ID_INFORMATION. For filesystems without UUID, falls back to stfs.f_fsid from vfs_statfs().

Risk Assessment

Missing this fix may lead to incorrect volume identification, potentially affecting SMB functionality.

Recommendation

Apply the Linux kernel patch containing this fix.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Use sb->s_uuid for a proper volume identifier as the primary choice. For filesystems that do not provide a UUID, fall back to stfs.f_fsid obtained from vfs_statfs().