Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-31693

cifs: some missing initializations on replay

CVSS 7.8 HighEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 30 Apr 2026, 11:47 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 433042a91f9373241307725b52de573933ffedbf to before c854ab481ece4b3e5f4c2e8b22824f015ff874a5 git
  • affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 1d731e512134495e0ef490ade0e4d91dc0d515ec git
  • affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 7c9ce68192eef14c777cb6ce17155d2eb2431aea git
  • affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before c99e160938b627f6f28edee930e8abc157e84386 git
  • affected 4f1fffa2376922f3d1d506e49c0fd445b023a28e to before 14f66f44646333d2bfd7ece36585874fd72f8286 git
  • affected 6.6.32 to before 6.6.128 semver
Other versions: unaffected
Linux Linux
  • affected 6.8
  • unaffected before 6.8 semver
  • unaffected 6.6.128 to 6.6.*, inclusive semver
  • unaffected 6.12.75 to 6.12.*, inclusive semver
  • unaffected 6.18.16 to 6.18.*, inclusive semver
  • unaffected 6.19.6 to 6.19.*, inclusive semver
  • unaffected 7.0 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-31693
CNA
Linux
Weakness (CWE)
CWE-665
Tags
Published
30 Apr 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0017, the 6th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 30 Apr 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.