CVE-2026-31654
kernel: mm/vma: fix memory leak in __mmap_region()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 24, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel. When a shared memory mapping is created for /dev/zero, a memory leak can occur if the virtual memory area (VMA) allocation fails. This happens because a newly allocated file, intended to back the mapping, is not properly released in the error path, leading to unreferenced memory objects. An attacker could potentially exploit this to cause a denial of service due to resource exhaustion.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime