CVE-2026-31589: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio() if we have a reference to (or hold a lock on) the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the mapping and the mapping can be removed, causing a use-after-free when accessing mapping->a_ops. Follow the same pattern as __remove_mapping() and load the free_folio function pointer before dropping the lock on the mapping. That lets us make filemap_free_folio() static as this was the only caller outside filemap.c.

Засегнати продукти

• Linux Linux: fb7d3bc4149395c1ae99029c852eab6c28fc3c88 преди efc52947247a21bbf79059539bbbd40f4ea76f00; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 преди b667df39d98a7a24be7c2a40ff0863dac1ad2cd7; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 преди c330e65ea59c4805d6ab6757c4ddfe8c63acef31; fb7d3bc4149395c1ae99029c852eab6c28fc3c88 преди 615d9bb2ccad42f9e21d837431e401db2e471195
• Linux Linux: 6.14; преди 6.14; 6.18.27 до 6.18.*; 6.19.14 до 6.19.*; 7.0.1 до 7.0.*; от 7.1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31589
• https://nvd.nist.gov/vuln/detail/CVE-2026-31589
• https://git.kernel.org/stable/c/efc52947247a21bbf79059539bbbd40f4ea76f00
• https://git.kernel.org/stable/c/b667df39d98a7a24be7c2a40ff0863dac1ad2cd7
• https://git.kernel.org/stable/c/c330e65ea59c4805d6ab6757c4ddfe8c63acef31
• https://git.kernel.org/stable/c/615d9bb2ccad42f9e21d837431e401db2e471195