CVE-2026-31693: linux Use of Uninitialized Resource

Vulnerability summary

CVE-2026-31693 is a high (CVSS 7.8) Use of Uninitialized Resource vulnerability in linux. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.6% of scored vulnerabilities.

Timeline

1. 30-04-2026
   PublishedVulnerability first disclosed.
2. 19-10-2026
   Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary reinitializations of certain local variables before replay. This change makes sure that these variables get initialized after the label.

• CWE-908Use of Uninitialized ResourceThe product uses or accesses a resource that has not been initialized.
• CWE-665Improper InitializationThe product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.