PT-2026-34949 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31597

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the ocfs2 fault() function. This occurs because filemap fault() may drop the mmap lock before returning VM FAULT RETRY. In such cases, a concurrent munmap() can trigger remove vma() and free the vm area struct via RCU. Consequently, the saved vma pointer in ocfs2 fault() becomes a dangling pointer, which is then dereferenced during the trace ocfs2 fault() call.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31597

ECHO-393D-B369-89D5

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 78

• https://git.kernel.org/stable/c/925bf22c1b823e231b1baea761fe8a1512e442f2 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31597 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31597 · Vendor Advisory
• https://git.kernel.org/stable/c/76a602fdbb78dd05b2da06f74a988cebc97e82d0 · Patch
• https://git.kernel.org/stable/c/6f072daefcab1d84ce37c073645615f63be91006 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31597 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31597 · Vendor Advisory
• https://git.kernel.org/stable/c/4cf2768a0291a0cdd0dae801ea0eafa3878a349d · Patch
• https://git.kernel.org/stable/c/7de554cabf160e331e4442e2a9ad874ca9875921 · Patch
• https://git.kernel.org/stable/c/d45ff441b416d4aa1af72b1db23d959601c04da2 · Patch
• https://ubuntu.com/security/CVE-2026-31597 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31597 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31597 · Security Note
• https://suse.com/security/cve/CVE-2026-31577 · Note