CVE-2026-31589 - Vulnerability Analysis
CriticalCVSS: 9.8Last Updated: April 27, 2026
Linux Kernel - Use After Free
Published: April 24, 2026Updated: April 27, 2026Remote Exploitable
Overview
Linux kernel contains a use-after-free vulnerability caused by improper handling of folio_unmap_invalidate() leading to access of freed mapping->a_ops, letting attackers cause memory corruption, exploit requires kernel code execution.
Severity & Score
Severity: Critical
CVSS Score: 9.8
Impact
Attackers can cause memory corruption or kernel crashes, potentially leading to privilege escalation or denial of service.
Mitigation
Update to the latest Linux kernel version containing the fix.
References
Related Resources
Details
- CVE ID
- CVE-2026-31589
- Severity
- Critical
- CVSS Score
- 9.8
- Type
- use_after_free
- Status
- unconfirmed
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H