VulnSocial

CVE-2026-31589Disclosure(linux / linux_kernel)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio() if we have a reference to (or hold a lock on) the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the mapping and the mapping can be removed, causing a use-after-free when accessing mapping->a_ops. Follow the same pattern as __remove_mapping() and load the free_folio function pointer before dropping the lock on the mapping. That lets us make filemap_free_folio() static as this was the only caller outside filemap.c.

linux CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Patch / fix
Other references
Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Vendors
linux
Products
linux_kernel

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-24: 2Patch / Workaround · 2026-04-24: 1Technical Details · 2026-04-24: 204-24
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-31589 In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio… https://www.cve.org/CVERecord?id=CVE-2026-31589 ----- Traducción: CVE-2026-31589 En … http://infoflow.cloud`

    Post summary

    A resolved Linux kernel vulnerability (CVE-2026-31589) is described, detailing a flaw involving direct calls to free_folio() in folio_unmap_invalidate(), but no PoC, exploit code, active usage, or patch information is provided.

    0100065
    72 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-31589 In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio… https://www.cve.org/CVERecord?id=CVE-2026-31589

    Post summary

    The CVE-2026-31589 vulnerability in the Linux kernel has been fixed by correcting a function call, with technical details provided and a link to the official CVE record.

    00000136
    57.2K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---

Explore more

Back to dashboardlinux CVEslinux_kernel vulnerabilities