CVE-2026-31410

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-04-06 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Use sb->s_uuid for a proper volume identifier as the primary choice. For filesystems that do not provide a UUID, fall back to stfs.f_fsid obtained from vfs_statfs().

Affected Software (12)

VendorProductVersion
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 5258e9187703bfd02faf19c37c23ab9d6587f24c
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 1df0123f96f377282feaae24d8e561fff4a6541f
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < ce00616bc1df675bfdacc968f2bf7c51f4669227
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 3d80ebe6d1b7bc9ad20fd9b0c1a0c56d804f8a0a
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < c283a6ffe6d5d6e5594d991286b9ce15951572e1
Linux Linux e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9 < 3a64125730cabc34fccfbc230c2667c2e14f7308
Linux Linux 5.15
linux linux_kernel 5.15 – 6.12.78
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.17%
Raw Score 0.001650
Percentile 5.7%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00165
2026-10-31
0.00165
2026-10-30
0.00164
2026-10-29
0.00164

Intelligence Sources

mitre ref →
nvd ref →