CVE-2026-31597 ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

🗓️ 24 Apr 2026 14:42:22Reported by LinuxType

CVE-2026-31597 fixes use-after-free in ocfs2_fault at VM_FAULT_RETRY by saving ip_blkno and removing vma.

Reporter	Title	Published	Views	Family All 71
ATTACKERKB	CVE-2026-31597	24 Apr 202614:42	–	attackerkb
CBLMariner	CVE-2026-31597 affecting package kernel for versions less than 6.6.137.1-1	3 May 202620:52	–	cbl_mariner
Chainguard	CVE-2026-31597 vulnerabilities	1 May 202619:17	–	cgr
CNNVD	Linux kernel 安全漏洞	24 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31597	24 Apr 202614:42	–	cve
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian CVE	CVE-2026-31597	24 Apr 202614:42	–	debiancve
Tenable Nessus	Debian dsa-6238 : ata-modules-6.12.74+deb13+1-armmp-di - security update	30 Apr 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2026-4.0-1028	5 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-31597	25 Apr 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/mmap.c",
      "fs/ocfs2/ocfs2_trace.h"
    ],
    "versions": [
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "36539c4d536f851a3b346a6ebb27b51bc3d77a94",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "35c2c05261d6f6d84aaa1355afa201d507943e76",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "3f5e74b5db9353b01ed50f4de84e75b755f8fbc2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "6f072daefcab1d84ce37c073645615f63be91006",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "4cf2768a0291a0cdd0dae801ea0eafa3878a349d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "d45ff441b416d4aa1af72b1db23d959601c04da2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "76a602fdbb78dd05b2da06f74a988cebc97e82d0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "925bf22c1b823e231b1baea761fe8a1512e442f2",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "614a9e849ca6ea24843795251cb30af525d5336b",
        "lessThan": "7de554cabf160e331e4442e2a9ad874ca9875921",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ocfs2/mmap.c",
      "fs/ocfs2/ocfs2_trace.h"
    ],
    "versions": [
      {
        "version": "2.6.39",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.39",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.136",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.83",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.24",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.14",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.1",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/35c2c05261d6f6d84aaa1355afa201d507943e76
git	www.git.kernel.org/stable/c/76a602fdbb78dd05b2da06f74a988cebc97e82d0
git	www.git.kernel.org/stable/c/4cf2768a0291a0cdd0dae801ea0eafa3878a349d
git	www.git.kernel.org/stable/c/3f5e74b5db9353b01ed50f4de84e75b755f8fbc2
git	www.git.kernel.org/stable/c/925bf22c1b823e231b1baea761fe8a1512e442f2
git	www.git.kernel.org/stable/c/7de554cabf160e331e4442e2a9ad874ca9875921
git	www.git.kernel.org/stable/c/6f072daefcab1d84ce37c073645615f63be91006
git	www.git.kernel.org/stable/c/d45ff441b416d4aa1af72b1db23d959601c04da2
git	www.git.kernel.org/stable/c/36539c4d536f851a3b346a6ebb27b51bc3d77a94

14 Jun 2026 17:42Current

CVSS 3.17.8

EPSS0.00128