CVE-2026-31589

In the Linux kernel, the following vulnerability has been resolved: mm: call ->free_folio() directly in folio_unmap_invalidate() We can only call filemap_free_folio() if we have a reference to (or hold a lock on) the mapping. Otherwise, we've already removed the folio from the mapping so it no longer pins the mapping and the mapping can be removed, causing a use-after-free when accessing mapping->a_ops. Follow the same pattern as __remove_mapping() and load the free_folio function pointer before dropping the lock on the mapping. That lets us make filemap_free_folio() static as this was the only caller outside filemap.c.

• CWE-416

• https://git.kernel.org/stable/c/615d9bb2ccad42f9e21d837431e401db2e471195Patch
• https://git.kernel.org/stable/c/b667df39d98a7a24be7c2a40ff0863dac1ad2cd7Patch
• https://git.kernel.org/stable/c/c330e65ea59c4805d6ab6757c4ddfe8c63acef31Patch
• https://git.kernel.org/stable/c/efc52947247a21bbf79059539bbbd40f4ea76f00

Published

Apr 24, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31583In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31584In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31585In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31586In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31587In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31588In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-31590In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31591In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31592In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31593In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31594In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31595In the Linux kernel, the following vulnerability has been re…5.5