CVE-2026-31390

MediumCVSS 5.5/10Last modified Jul 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/xe: Fix memory leak in xe_vm_madvise_ioctl

When check_bo_args_are_sane() validation fails, jump to the new free_vmas cleanup label to properly free the allocated resources. This ensures proper cleanup in this error path.

(cherry picked from commit 29bd06faf727a4b76663e4be0f7d770e2d2a7965)

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 293032eec4baa04374d62dd44de61e355296ad32, < c3aa7b837920c844d5ae0dd3dbaeb465a461de40; >= 293032eec4baa04374d62dd44de61e355296ad32, < 1c87b48a0ff040723f84a67b32892af7e6a3634f; >= 293032eec4baa04374d62dd44de61e355296ad32, < 0cfe9c4838f1147713f6b5c02094cd4dc0c598fa
LinuxLinux6.18

References

Timeline

Published
Apr 3, 2026
Last modified
Jul 24, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-313915.5In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix OOM ->tfm_count leak If memory allocation CVE-2026-313928.1In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option Customer reported thaCVE-2026-313938.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access CVE-2026-313945.5In the Linux kernel, the following vulnerability has been resolved: mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations iCVE-2026-313957.1In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASCVE-2026-313967.8In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP clock PTP clock is registeCVE-2026-313977.8In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() move_paCVE-2026-313987.8In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyfree folios We batch unCVE-2026-313997.8In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asynchronous initializationCVE-2026-31404.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14. This iCVE-2026-314005.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file dCVE-2026-314017.8In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_request right now the retu
CVE-2026-31390: Medium severity, CVSS 5.5 | Vulnix