CVE-2026-31686

A flaw was found in the Linux kernel. A double-free vulnerability exists in the Kernel Address Sanitizer (KASAN) component, specifically within the kasan_free_pxd() function. This issue arises because the function incorrectly assumes that page tables are always page-aligned, which is not consistent across all architectures. This can lead to a double-free when memory is deallocated, potentially causing a system crash and resulting in a Denial of Service (DoS).

This Moderate impact flaw in the Linux kernel's Kernel Address Sanitizer (KASAN) component can lead to a system crash due to a double-free vulnerability. The issue arises from incorrect assumptions about page table alignment across different architectures, potentially resulting in a Denial of Service. This flaw is exploited with a debug enable flag with needs a privileged user to exploit.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.