Linux move_pages_huge_pmd Heap Buffer Overflow DoS

The vulnerability of the movepageshugepmd function in the Linux operating system is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-31456 mm/pagewalk: fix race between concurrent split and refault

In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splitting of a PUD entry in walkpudrange can race with a concurrent thread refaulting the PUD leaf entry causing it to try walking a PMD range that has disappeared. A...

Linux Distros Unpatched Vulnerability : CVE-2026-31397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page...

SUSE CVE-2026-31397

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page path, srcfolio is explicitly set to NULL, and is used as a sentinel to...

CVE-2026-31397

A flaw was found in the Linux kernel's memory management subsystem, specifically within the movepageshugepmd function. A local user could exploit a NULL pointer dereference when handling huge zero pages, which can lead to a system crash and a Denial of Service DoS. Furthermore, improper...

EUVD-2026-18776

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page path, srcfolio is explicitly set to NULL, and is used as a sentinel to...

CVE-2026-31397

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page path, srcfolio is explicitly set to NULL, and is used as a sentinel to...

CVE-2026-31397

CVE-2026-31397 relates to the Linux kernel memory management path mm/huge_memory move_pages_huge_pmd(), where the huge zero page branch used a NULL src_folio, causing a bogus PFN (or NULL dereference on some memory models) when constructing PMDs. The fix uses page_folio(src_page) to obtain a vali...

CVE-2026-31397 mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: fix use of NULL folio in movepageshugepmd movepageshugepmd handles UFFDIOMOVE for both normal THPs and huge zero pages. For the huge zero page path, srcfolio is explicitly set to NULL, and is used as a sentinel to...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

com.alibaba.p3c.idea:p3c-common (1.0.0), com.alibaba.p3c:p3c-pmd (>=1.0.0, <=1.3.6) +30 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (5.5.2)

net.sourceforge.pmd:pmd-core MAVEN version 5.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.alibaba.p3c.idea:p3c-common 1.0.0 - com.alibaba.p3c:p3c-pmd =1.0.0, =0.0.1, =0.0.7 -...

net.sourceforge.pmd:pmd-apex (6.3.0), net.sourceforge.pmd:pmd-cpp (6.3.0) +26 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.3.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-apex 6.3.0 - net.sourceforge.pmd:pmd-cpp 6.3.0 - net.sourceforge.pmd:pmd-cs 6.3...

com.qulice:qulice-ant (>=0.18, <=0.18.5), com.qulice:qulice-maven-plugin (>=0.18, <=0.18.5) +27 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.6.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.qulice:qulice-ant =0.18, =0.18, =0.18, =0.18.5 - net.sourceforge.pmd:pmd-apex 6.6.0 -...

net.sourceforge.pmd:pmd-apex (6.12.0), net.sourceforge.pmd:pmd-cpp (6.12.0) +26 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.12.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-apex 6.12.0 - net.sourceforge.pmd:pmd-cpp 6.12.0 - net.sourceforge.pmd:pmd-cs...

com.alibaba.p3c:p3c-pmd (>=2.0.0, <=2.1.1), com.cowave.commons:commons-framework (>=2.7.1, <=2.7.5) +31 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.15.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.alibaba.p3c:p3c-pmd =2.0.0, =2.7.1, =2.7.5 - com.cowave.commons:dtm-example 2.7.3 -...

com.xenoamess.p3c:p3c-pmd (>=2.1.0.1x, <=2.1.0.2x), net.sourceforge.pmd:pmd-apex (6.26.0) +32 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.26.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.xenoamess.p3c:p3c-pmd =2.1.0.1x, =2.1.0.2x - net.sourceforge.pmd:pmd-apex 6.26.0 -...

net.sourceforge.pmd:pmd-apex (6.27.0), net.sourceforge.pmd:pmd-cpp (6.27.0) +32 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.27.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - net.sourceforge.pmd:pmd-apex 6.27.0 - net.sourceforge.pmd:pmd-cpp 6.27.0 - net.sourceforge.pmd:pmd-cs...

de.cwkr:cwkr-pmd (1.3.1), net.sourceforge.pmd:pmd-apex (6.28.0) +32 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.28.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - de.cwkr:cwkr-pmd 1.3.1 - net.sourceforge.pmd:pmd-apex 6.28.0 - net.sourceforge.pmd:pmd-cpp 6.28.0 -...

com.sap.cloud.sdk.quality:pmd-rules (>=3.42.0, <=3.43.0), com.zxytech.jurest:jurest-pmd (>=1.1.0, <=1.1.4) +33 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.32.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.sap.cloud.sdk.quality:pmd-rules =3.42.0, =1.1.0, =1.1.4 - net.sourceforge.pmd:pmd-apex 6.32.0 -...

com.sap.cloud.sdk.quality:pmd-rules (3.46.0), edu.hm.hafner:analysis-model (>=10.1.0, <=10.2.5) +35 more potentially affected by CVE-2026-28338 via net.sourceforge.pmd:pmd-core (6.34.0)

net.sourceforge.pmd:pmd-core MAVEN version 6.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.pmd:pmd-core and may be impacted: - com.sap.cloud.sdk.quality:pmd-rules 3.46.0 - edu.hm.hafner:analysis-model =10.1.0, =2021.12.0, =2022.1...