PT-2026-34927 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-15 · CVE-2026-31575

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the mfill atomic hugetlb() function, the linear page index() function is used to calculate the page index for hugetlb fault mutex hash(). Because linear page index() returns the index in PAGE SIZE units while hugetlb fault mutex hash() expects the index in huge page units, different addresses within the same huge page can produce different hash values. This leads to the use of different mutexes for the same huge page, causing races between faulting threads that can corrupt the reservation map and trigger a BUG ON in resv map release().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31575

OESA-2026-2312

OESA-2026-2313

OESA-2026-2314

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 102

• https://nvd.nist.gov/vuln/detail/CVE-2026-43214 · Security Note
• https://git.kernel.org/stable/c/5a525c43baaba0bf3063f86996ca3623b71e4172 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43018 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43017 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31624 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31436 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43363 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43019 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2312 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43420 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43013 · Security Note