CVE-2026-31686 mm/kasan: fix double free for kasan pXds

🗓️ 27 Apr 2026 17:30:53Reported by LinuxType

Kernel kasan: fix double free by using start of pxd table for pxd on some architectures.

Reporter	Title	Published	Views	Family All 69
ATTACKERKB	CVE-2026-31686	27 Apr 202617:30	–	attackerkb
Chainguard	CVE-2026-31686 vulnerabilities	8 May 202607:18	–	cgr
CNNVD	Linux kernel 安全漏洞	27 Apr 202600:00	–	cnnvd
CVE	CVE-2026-31686	27 Apr 202617:30	–	cve
Debian	[SECURITY] [DSA 6238-1] linux security update	30 Apr 202620:05	–	debian
Debian CVE	CVE-2026-31686	27 Apr 202617:30	–	debiancve
Tenable Nessus	Debian dsa-6238 : ata-modules-6.12.74+deb13+1-armmp-di - security update	30 Apr 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2026-4.0-1028	5 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0862	6 Jun 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-31686	28 Apr 202600:00	–	nessus

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "mm/kasan/init.c"
    ],
    "versions": [
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "7d7b2d5c107a1f6302cf0006d859985e7c3ddd1c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "3298bdf5a878ded06351eb293856fa84e050029e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "2277246ea265cdca64ce6fdea4b26cd6ff0ec4db",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "cec74b2ab7dff866b1d77eaa545b9e8fd14a1f87",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "a05f77cb227c39c5069aea6f12762a29d1e6c103",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "f6204f7ff6aff62ce6242a76982c5ba3a9ded707",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "85d98614e089a67dc6faa8ca766fe10a639f82b4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "b38237a2ea9c6c19836eee2c57037e1f9f103576",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0207df4fa1a869281ddbf72db6203dbf036b3e1a",
        "lessThan": "51d8c78be0c27ddb91bc2c0263941d8b30a47d3b",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "mm/kasan/init.c"
    ],
    "versions": [
      {
        "version": "4.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.258",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.209",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.175",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.136",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.83",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.24",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19.14",
        "lessThanOrEqual": "6.19.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.0.1",
        "lessThanOrEqual": "7.0.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/7d7b2d5c107a1f6302cf0006d859985e7c3ddd1c
git	www.git.kernel.org/stable/c/2277246ea265cdca64ce6fdea4b26cd6ff0ec4db
git	www.git.kernel.org/stable/c/51d8c78be0c27ddb91bc2c0263941d8b30a47d3b
git	www.git.kernel.org/stable/c/cec74b2ab7dff866b1d77eaa545b9e8fd14a1f87
git	www.git.kernel.org/stable/c/f6204f7ff6aff62ce6242a76982c5ba3a9ded707
git	www.git.kernel.org/stable/c/a05f77cb227c39c5069aea6f12762a29d1e6c103
git	www.git.kernel.org/stable/c/85d98614e089a67dc6faa8ca766fe10a639f82b4
git	www.git.kernel.org/stable/c/b38237a2ea9c6c19836eee2c57037e1f9f103576
git	www.git.kernel.org/stable/c/3298bdf5a878ded06351eb293856fa84e050029e

14 Jun 2026 17:43Current

EPSS0.00122