CVE Database›Document archive›CVE-2026-31654

CVE-2026-31654

kernel: mm/vma: fix memory leak in __mmap_region()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. When a shared memory mapping is created for /dev/zero, a memory leak can occur if the virtual memory area (VMA) allocation fails. This happens because a newly allocated file, intended to back the mapping, is not properly released in the error path, leading to unreferenced memory objects. An attacker could potentially exploit this to cause a denial of service due to resource exhaustion.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime