LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-31589

CVE-2026-31589 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: April 27, 2026

Linux Kernel - Use After Free

Published: April 24, 2026Updated: April 27, 2026Remote Exploitable

Overview

Linux kernel contains a use-after-free vulnerability caused by improper handling of folio_unmap_invalidate() leading to access of freed mapping->a_ops, letting attackers cause memory corruption, exploit requires kernel code execution.

Severity & Score

Severity: Critical
CVSS Score: 9.8

Impact

Attackers can cause memory corruption or kernel crashes, potentially leading to privilege escalation or denial of service.

Mitigation

Update to the latest Linux kernel version containing the fix.

Details

CVE ID
CVE-2026-31589
Severity
Critical
CVSS Score
9.8
Type
use_after_free
Status
unconfirmed

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H