https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:46:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31539 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available</p> <p>The logic off managing recv credits by counting posted recv_io and granted credits is racy.</p> <p>That&#39;s because the peer might already consumed a credit, but between receiving the incoming recv at the hardware and processing the completion in the &#39;recv_done&#39; functions we likely have a window where we grant credits, which don&#39;t really exist.</p> <p>So we better have a decicated counter for the available credits, which will be incremented when we posted new recv buffers and drained when we grant the credits to the peer.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available</p> <p>The logic off managing recv credits by counting posted recv_io and granted credits is racy.</p> <p>That&#39;s because the peer might already consumed a credit, but between receiving the incoming recv at the hardware and processing the completion in the &#39;recv_done&#39; functions we likely have a window where we grant credits, which don&#39;t really exist.</p> <p>So we better have a decicated counter for the available credits, which will be incremented when we posted new recv buffers and drained when we grant the credits to the peer.</p> https://vulnerability.circl.lu/vuln/cve-2026-31539