CVE-2026-31711: linux kernel 6.2; +2 more affected products

Affected technology

linux kernel · from 5.15.91 (inclusive), before 5.16 (exclusive)
linux

linux kernel · from 6.1.9 (inclusive), before 6.2 (exclusive)
linux

linux kernel · from 6.2.1 (inclusive), before 6.6.136 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.84 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.25 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.2 (exclusive)
linux

linux kernel · 6.2
linux

linux kernel · 6.2 · update rc6
linux

linux kernel · 6.2 · update rc7
linux

linux kernel · 6.2 · update rc8
linux

Linux · 4210c3555db4b38bade92331b153e583261f05f9 to before dc2e7d595d68cf1be1ba64e3d30ebf3266bf7242, d5d7847e57ac69fa99c18b363a34419bcdb5a281 to before 60734c8bc3b4aa0672e251f08dda81977e4b5387, 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 to before 97f8d2648ef4871e4cd335e2d769cb40054a6772, 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 to before 295a9fc6789d1011c36ded9f0f2907bb34fa0de4, 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 to before 283027aa93380380a0994f35dde3ec95318f2654, 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 to before fb48185bcd946d42de7017cf27f912f8ab26acf0, 0d0d4680db22eda1eea785c47bbf66a9b33a8b16 to before 6551300dc452ac16a855a83dbd1e74899542d3b3, 5.15.91 to before 5.15.210, 6.1.9 to before 6.1.175
Linux

Linux · 6.2
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: has
File: fs/smb/server/transport_tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker can drive the server toward the memory pressure that makes alloc_transport() fail by holding open connections with large RFC1002 lengths up to MAX_STREAM_PROT_LEN (0x00FFFFFF); natural transient allocation failures on a loaded host produce the same drift more slowly. Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.