CVE-2026-31409

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ksmbd: unset conn-&gt;binding on failed binding request<br /> <br /> When a multichannel SMB2_SESSION_SETUP request with<br /> SMB2_SESSION_REQ_FLAG_BINDING fails ksmbd sets conn-&gt;binding = true<br /> but never clears it on the error path. This leaves the connection in<br /> a binding state where all subsequent ksmbd_session_lookup_all() calls<br /> fall back to the global sessions table. This fix it by clearing<br /> conn-&gt;binding = false in the error path.