---
id: CVE-2026-31710
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb: client: fix dir separator in SMB1 UNIX mounts

  When calling cifs_mount_get_tcon() with SMB1 UNIX mounts,
  @cifs_sb->mnt_cifs_flags needs to be read or updated only …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  smb: client: fix dir separator in SMB1 UNIX mounts

  When calling cifs_mount_get_tcon() with SMB1 UNIX mounts,
  @cifs_sb->mnt_cifs_flags needs to be read or updated only …
severity: medium
cvss: 5.5
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 7.0.1, < 7.0.2'
  - linux_kernel = 7.0
patched:
  - linux_kernel 7.0.2
published: '2026-05-01'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T14:17:15.840'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-31710'
references:
  - url: 'https://git.kernel.org/stable/c/c4d3fc5844d685441befd0caaab648321013cdfd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fbbfcf35e1ee3396631f3dc6214cb626aa9814c3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00143
epssPercentile: 0.02971
ingestedAt: '2026-09-21T13:37:22.846Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix dir separator in SMB1 UNIX mounts

When calling cifs_mount_get_tcon() with SMB1 UNIX mounts,
@cifs_sb->mnt_cifs_flags needs to be read or updated only after
calling reset_cifs_unix_caps(), otherwise it might end up with missing
CIFS_MOUNT_POSIXACL and CIFS_MOUNT_POSIX_PATHS bits.

This fixes the wrong dir separator used in paths caused by the missing
CIFS_MOUNT_POSIX_PATHS bit in cifs_sb_info::mnt_cifs_flags.

## Affected

- `linux_kernel >= 7.0.1, < 7.0.2`
- `linux_kernel = 7.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 7.0.2`