Abstract
None of QSAN's products are affected by CVE-2026-31717.
This vulnerability affects the ksmbd in-kernel SMB server of the Linux kernel. QSAN storage products provide SMB service through the user-space Samba implementation, and the in-kernel SMB server (CONFIG_SMB_SERVER) is not enabled on any QSAN platform.
Applied to
Mitigation
None.
Detail
CVE-2026-31717
Severity: Not affected
CVSS3 Base Score: 0.0
CVSS3 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
In the Linux kernel, ksmbd does not verify whether the user attempting to reconnect to a durable handle is the same user who originally opened the file. This allows any authenticated user to hijack an orphaned durable handle by predicting or brute-forcing the persistent ID.