PT-2026-35000 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-04-28 · CVE-2026-31648

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0-rc3

Description An integer overflow occurs in the nr pages calculation within the filemap map pages() function. This issue can be triggered during a race condition where the inode size is shrunk via ext4 setattr() while filemap map pages() is executing. The overflow causes the set pte range() function to map a range that exceeds the folio size, which can lead to the corruption of page fields such as page-> mapcount and result in system crashes characterized by bad page states.

Recommendations As a temporary workaround, consider restricting the use of the filemap map pages() function or the associated file mapping operations until a patch is applied.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-31648

ECHO-FF64-2809-6ED3

Affected Products

Linux Kernel

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2026-31648 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31648 · Vendor Advisory
• https://git.kernel.org/stable/c/633ab680c405ac390e6bec5b74aaf46197c837b6 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31648 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31648 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31648 · Vendor Advisory
• https://git.kernel.org/stable/c/9316a820b9aae07d44469d6485376dad824c5b3f · Patch
• https://cve.org/CVERecord?id=CVE-2026-31648 · Security Note
• https://git.kernel.org/stable/c/88591194df736a508dd5461ab2167a61e98caac1 · Patch
• https://git.kernel.org/stable/c/576543bedd616254032d4ebe54a90076f9e31740 · Patch
• https://git.kernel.org/stable/c/f58df566524ebcdfa394329c64f47e3c9257516e · Patch
• https://ubuntu.com/security/CVE-2026-31648 · Vendor Advisory
• https://git.kernel.org/linus/f58df566524ebcdfa394329c64f47e3c9257516e · Note
• https://twitter.com/CVEnew/status/2047731933069648103 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2047759503496560867 · Twitter Post