CVE-2026-31398: In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyfree
infovulnerability
security
Summary
A bug in the Linux kernel's memory management was causing the system to crash when handling lazyfree folios (large memory pages marked for lazy freeing). The problem occurred because when unmapping multiple page table entries (PTEs, the pointers that map virtual memory to physical memory) in a batch, the code incorrectly set all of them as writable even if some should have been read-only, which violated memory safety rules and triggered a crash.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
April 3, 2026
Classification
Attack SophisticationModerate
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-31398
First tracked: April 3, 2026 at 02:07 PM
Classified by LLM (prompt v3) · confidence: 95%