Vulnerability in Linux
CVE-2026-31648
In the Linux kernel, the following vulnerability has been resolved: mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() When running stress-ng on my Arm64 machine with v7.0-rc3 kernel, I encountered some very strange cr…
EPSS: 0.000 (3.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions fe601b70eac6cd266e8d7d55030e90a73ed0e339, 743a2753a02e805347969f6f89f38b736850d808, 7.0
References
- git.kernel.org/stable/c/88591194df736a508dd5461ab2167a61e98caac1
- git.kernel.org/stable/c/633ab680c405ac390e6bec5b74aaf46197c837b6
- git.kernel.org/stable/c/576543bedd616254032d4ebe54a90076f9e31740
- git.kernel.org/stable/c/9316a820b9aae07d44469d6485376dad824c5b3f
- git.kernel.org/stable/c/f58df566524ebcdfa394329c64f47e3c9257516e
Frequently asked questions
- What is CVE-2026-31648?
- CVE-2026-31648 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2026-04-24.
- How severe is CVE-2026-31648?
- High severity. CVSS v3 base score is 7.8 out of 10.