{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-31710",
  "modified": "2026-11-06T05:30:01Z",
  "upstream": [
    "CVE-2026-31710"
  ],
  "published": "2026-05-01T13:56:32Z",
  "summary": "smb: client: fix dir separator in SMB1 UNIX mounts",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix dir separator in SMB1 UNIX mounts\n\nWhen calling cifs_mount_get_tcon() with SMB1 UNIX mounts,\n@cifs_sb->mnt_cifs_flags needs to be read or updated only after\ncalling reset_cifs_unix_caps(), otherwise it might end up with missing\nCIFS_MOUNT_POSIXACL and CIFS_MOUNT_POSIX_PATHS bits.\n\nThis fixes the wrong dir separator used in paths caused by the missing\nCIFS_MOUNT_POSIX_PATHS bit in cifs_sb_info::mnt_cifs_flags.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:13",
        "name": "linux"
      },
      "versions": [
        "1:6.18.60-1+rpt1"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.18.60+rpt-rpi-2712",
            "binary_version": "1:6.18.60-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.60+rpt-rpi-v6",
            "binary_version": "1:6.18.60-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.60+rpt-rpi-v7",
            "binary_version": "1:6.18.60-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.60+rpt-rpi-v8",
            "binary_version": "1:6.18.60-1+rpt1"
          },
          {
            "binary_name": "linux-image-6.18.60+rpt-rpi-v8-rt",
            "binary_version": "1:6.18.60-1+rpt1"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.18.60-1+rpt1": {
            "linux_commit": "0b41724521c9adf5399409d02aece6c1df0a4432",
            "upstream_version": "6.18.60",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": null
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-31710"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/fbbfcf35e1ee3396631f3dc6214cb626aa9814c3"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/c4d3fc5844d685441befd0caaab648321013cdfd"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-09-21T13:30:03Z"
  }
}