CVE-2026-31714

MEDIUM EPSS 1.7%
Published May 1, 20261mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 1, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid memory leak in f2fs_rename() syzbot reported a f2fs bug as below: BUG: memory leak unreferenced object 0xffff888127f70830 (size 16): comm "syz.0.23", pid 6144, jiffies 4294943712 hex dump (first 16 bytes): 3c af 57 72 5b e6 8f ad 6e 8e fd 33 42 39 03 ff <.Wr[...n..3B9.. backtrace (crc 925f8a80): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4520 [inline] slab_alloc_node mm/slub.c:4844 [inline] __do_kmalloc_node mm/slub.c:5237 [inline] __kmalloc_noprof+0x3bd/0x560 mm/slub.c:5250 kmalloc_noprof include/linux/slab.h:954 [inline] fscrypt_setup_filename+0x15e/0x3b0 fs/crypto/fname.c:364 f2fs_setup_filename+0x52/0xb0 fs/f2fs/dir.c:143 f2fs_rename+0x159/0xca0 fs/f2fs/namei.c:961 f2fs_rename2+0xd5/0xf20 fs/f2fs/namei.c:1308 vfs_rename+0x7ff/0x1250 fs/namei.c:6026 filename_renameat2+0x4f4/0x660 fs/namei.c:6144 __do_sys_renameat2 fs/namei.c:6173 [inline] __se_sys_renameat2 fs/namei.c:6168 [inline] __x64_sys_renameat2+0x59/0x80 fs/namei.c:6168 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xe2/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The root cause is in commit 40b2d55e0452 ("f2fs: fix to create selinux label during whiteout initialization"), we added a call to f2fs_setup_filename() without a matching call to f2fs_free_filename(), fix it.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
1.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 7

VendorProductVersionRange
linuxlinux_kernel*≥6.6.23  –  <6.6.136
linuxlinux_kernel*≥6.7.11  –  <6.8
linuxlinux_kernel*≥6.8.2  –  <6.9
linuxlinux_kernel*≥6.9  –  <6.12.84
linuxlinux_kernel*≥6.13  –  <6.18.25
linuxlinux_kernel*≥6.19  –  <7.0.2
linuxlinux_kernel7.1any

References 5

  • git.kernel.org https://git.kernel.org/stable/c/047c0aef6af37a2a35181aa085c616ad286386f1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/369eb2016d8e2f01931b3bad1cb9cefa83f44003
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3cf11e6f36c170050c12171dd6fd3142711478fc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a76c1cad4e80a9802ef8048662255417e3ce5b79
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c78206dcb912ab60b8ee3cbe8c48d749a9a12e1e
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/047c0aef6af37a2a35181aa085c616ad286386f1
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/369eb2016d8e2f01931b3bad1cb9cefa83f44003
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/3cf11e6f36c170050c12171dd6fd3142711478fc
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a76c1cad4e80a9802ef8048662255417e3ce5b79
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c78206dcb912ab60b8ee3cbe8c48d749a9a12e1e
    Patch