[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31466":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":60,"related":61,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":80,"kevs":123,"epss":124,"epss_history":127,"metrics":339,"affected":345},"CVE-2026-31466","In the Linux kernel, the following vulnerability has been resolved:\n\nmm/huge_memory: fix folio isn't locked in softleaf_to_folio()\n\nOn arm64 server, we found folio that get from migration entry isn't locked\nin softleaf_to_folio().  This issue triggers when mTHP splitting and\nzap_nonpresent_ptes() races, and the root cause is lack of memory barrier\nin softleaf_to_folio().  The race is as follows:\n\n\tCPU0                                             CPU1\n\ndeferred_split_scan()                              zap_nonpresent_ptes()\n  lock folio\n  split_folio()\n    unmap_folio()\n      change ptes to migration entries\n    __split_folio_to_order()                         softleaf_to_folio()\n      set flags(including PG_locked) for tail pages    folio = pfn_folio(softleaf_to_pfn(entry))\n      smp_wmb()                                        VM_WARN_ON_ONCE(!folio_test_locked(folio))\n      prep_compound_page() for tail pages\n\nIn __split_folio_to_order(), smp_wmb() guarantees page flags of tail pages\nare visible before the tail page becomes non-compound.  smp_wmb() should\nbe paired with smp_rmb() in softleaf_to_folio(), which is missed.  As a\nresult, if zap_nonpresent_ptes() accesses migration entry that stores tail\npfn, softleaf_to_folio() may see the updated compound_head of tail page\nbefore page->flags.\n\nThis issue will trigger VM_WARN_ON_ONCE() in pfn_swap_entry_folio()\nbecause of the race between folio split and zap_nonpresent_ptes()\nleading to a folio incorrectly undergoing modification without a folio\nlock being held.\n\nThis is a BUG_ON() before commit 93976a20345b (\"mm: eliminate further\nswapops predicates\"), which in merged in v6.19-rc1.\n\nTo fix it, add missing smp_rmb() if the softleaf entry is migration entry\nin softleaf_to_folio() and softleaf_to_page().\n\n[tujinjiang@huawei.com: update function name and comments]",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44,46,48,50,52,54,56,58],{"_key":33},"MGASA-2026-0108",{"_key":35},"MGASA-2026-0110",{"_key":37},"DEBIAN-CVE-2026-31466",{"_key":39},"SUSE-SU-2026:22521-1",{"_key":41},"SUSE-SU-2026:22522-1",{"_key":43},"SUSE-SU-2026:2799-1",{"_key":45},"SUSE-SU-2026:2800-1",{"_key":47},"SUSE-SU-2026:22665-1",{"_key":49},"SUSE-SU-2026:22666-1",{"_key":51},"UBUNTU-CVE-2026-31466",{"_key":53},"USN-8567-1",{"_key":55},"USN-8574-1",{"_key":57},"USN-8575-1",{"_key":59},"USN-8576-1",[],[62,63,64,65,66,67],{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},"2026-04-22T13:53:56.259Z","2026-07-14T12:47:58.674Z","Analyzed",{"cisa_kev":72,"cisa_ransomware":72,"cisa_vendor":9,"epss_severity":73,"epss_score":74,"severity":75,"severity_score":76,"severity_version":77,"severity_source":78,"severity_vector":79,"severity_status":70},false,"low",0.00089,"medium",4.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",[81,87,91,95,99,103,107,111,115,119],{"url":82,"sources":83,"tags":85},"https://git.kernel.org/stable/c/426ee10711586617da869c8bb798214965337617",[84,78],"cve.org",[86],"Patch",{"url":88,"sources":89,"tags":90},"https://git.kernel.org/stable/c/f1acf5887c2bbaf998dc3fe32c72b7a8b84a3ddd",[84,78],[86],{"url":92,"sources":93,"tags":94},"https://git.kernel.org/stable/c/722cfaf6b31d31123439e67b5deac6b1261a3dea",[84,78],[86],{"url":96,"sources":97,"tags":98},"https://git.kernel.org/stable/c/7ddcf4a245c1c5a91fdd9698757e3d95179ffe41",[84,78],[86],{"url":100,"sources":101,"tags":102},"https://git.kernel.org/stable/c/b8c49ad888892ad7b77062b9c102b799a3e9b4f8",[84,78],[86],{"url":104,"sources":105,"tags":106},"https://git.kernel.org/stable/c/7ad1997b9bc8032603df8f091761114479285769",[84,78],[86],{"url":108,"sources":109,"tags":110},"https://git.kernel.org/stable/c/8bfb8414e9f2ce6f5f2f0e3d0da52f2d132128e7",[84,78],[86],{"url":112,"sources":113,"tags":114},"https://git.kernel.org/stable/c/4c5e7f0fcd592801c9cc18f29f80fbee84eb8669",[84,78],[86],{"url":116,"sources":117,"tags":118},"https://cert-portal.siemens.com/productcert/html/ssa-082556.html",[84],[],{"url":120,"sources":121,"tags":122},"https://cert-portal.siemens.com/productcert/html/ssa-019113.html",[84],[],[],{"date":125,"score":74,"percentile":126},"2026-07-05",0.00559,[128,132,135,138,141,144,148,151,154,157,160,163,166,169,172,175,179,182,185,187,190,193,196,198,201,204,207,210,213,216,219,222,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,288,291,294,297,299,301,304,307,309,312,315,317,319,321,324,326,328,331,333,335,338],{"date":129,"score":130,"percentile":131},"2026-04-23",0.00024,0.06794,{"date":133,"score":130,"percentile":134},"2026-04-24",0.06773,{"date":136,"score":130,"percentile":137},"2026-04-25",0.06802,{"date":139,"score":130,"percentile":140},"2026-04-26",0.06793,{"date":142,"score":130,"percentile":143},"2026-04-27",0.06785,{"date":145,"score":146,"percentile":147},"2026-04-28",0.00032,0.09197,{"date":149,"score":146,"percentile":150},"2026-04-29",0.09201,{"date":152,"score":146,"percentile":153},"2026-04-30",0.09206,{"date":155,"score":146,"percentile":156},"2026-05-01",0.09146,{"date":158,"score":146,"percentile":159},"2026-05-02",0.09188,{"date":161,"score":146,"percentile":162},"2026-05-03",0.09164,{"date":164,"score":146,"percentile":165},"2026-05-04",0.09121,{"date":167,"score":146,"percentile":168},"2026-05-05",0.09112,{"date":170,"score":146,"percentile":171},"2026-05-06",0.09129,{"date":173,"score":146,"percentile":174},"2026-05-07",0.09285,{"date":176,"score":177,"percentile":178},"2026-05-08",0.00012,0.01721,{"date":180,"score":177,"percentile":181},"2026-05-09",0.01728,{"date":183,"score":177,"percentile":184},"2026-05-10",0.01729,{"date":186,"score":177,"percentile":184},"2026-05-11",{"date":188,"score":177,"percentile":189},"2026-05-12",0.01716,{"date":191,"score":177,"percentile":192},"2026-05-13",0.01724,{"date":194,"score":177,"percentile":195},"2026-05-14",0.01726,{"date":197,"score":177,"percentile":192},"2026-05-15",{"date":199,"score":177,"percentile":200},"2026-05-16",0.01722,{"date":202,"score":177,"percentile":203},"2026-05-17",0.01718,{"date":205,"score":177,"percentile":206},"2026-05-18",0.01704,{"date":208,"score":177,"percentile":209},"2026-05-19",0.01701,{"date":211,"score":177,"percentile":212},"2026-05-20",0.01698,{"date":214,"score":177,"percentile":215},"2026-05-21",0.01686,{"date":217,"score":177,"percentile":218},"2026-05-22",0.01807,{"date":220,"score":177,"percentile":221},"2026-05-23",0.01804,{"date":223,"score":224,"percentile":225},"2026-05-24",0.00014,0.02721,{"date":227,"score":224,"percentile":228},"2026-05-25",0.02706,{"date":230,"score":224,"percentile":231},"2026-05-26",0.0267,{"date":233,"score":224,"percentile":234},"2026-05-27",0.0269,{"date":236,"score":224,"percentile":237},"2026-05-28",0.02672,{"date":239,"score":224,"percentile":240},"2026-05-29",0.02679,{"date":242,"score":224,"percentile":243},"2026-05-30",0.02701,{"date":245,"score":224,"percentile":246},"2026-05-31",0.02688,{"date":248,"score":224,"percentile":249},"2026-06-01",0.02666,{"date":251,"score":224,"percentile":252},"2026-06-02",0.02638,{"date":254,"score":224,"percentile":255},"2026-06-03",0.02627,{"date":257,"score":224,"percentile":258},"2026-06-04",0.02626,{"date":260,"score":224,"percentile":261},"2026-06-05",0.02637,{"date":263,"score":224,"percentile":264},"2026-06-06",0.0264,{"date":266,"score":224,"percentile":267},"2026-06-07",0.02585,{"date":269,"score":224,"percentile":270},"2026-06-08",0.0257,{"date":272,"score":224,"percentile":273},"2026-06-09",0.02535,{"date":275,"score":224,"percentile":276},"2026-06-10",0.02544,{"date":278,"score":224,"percentile":279},"2026-06-11",0.0256,{"date":281,"score":224,"percentile":282},"2026-06-12",0.02564,{"date":284,"score":224,"percentile":285},"2026-06-13",0.02554,{"date":287,"score":224,"percentile":282},"2026-06-14",{"date":289,"score":74,"percentile":290},"2026-06-15",0.00565,{"date":292,"score":74,"percentile":293},"2026-06-16",0.00564,{"date":295,"score":74,"percentile":296},"2026-06-17",0.0057,{"date":298,"score":74,"percentile":296},"2026-06-18",{"date":300,"score":74,"percentile":296},"2026-06-19",{"date":302,"score":74,"percentile":303},"2026-06-20",0.00569,{"date":305,"score":74,"percentile":306},"2026-06-21",0.00568,{"date":308,"score":74,"percentile":303},"2026-06-22",{"date":310,"score":74,"percentile":311},"2026-06-23",0.00567,{"date":313,"score":74,"percentile":314},"2026-06-24",0.00566,{"date":316,"score":74,"percentile":290},"2026-06-25",{"date":318,"score":74,"percentile":314},"2026-06-26",{"date":320,"score":74,"percentile":314},"2026-06-27",{"date":322,"score":74,"percentile":323},"2026-06-28",0.00563,{"date":325,"score":74,"percentile":323},"2026-06-29",{"date":327,"score":74,"percentile":323},"2026-06-30",{"date":329,"score":74,"percentile":330},"2026-07-01",0.00562,{"date":332,"score":74,"percentile":330},"2026-07-02",{"date":334,"score":74,"percentile":330},"2026-07-03",{"date":336,"score":74,"percentile":337},"2026-07-04",0.0056,{"date":125,"score":74,"percentile":126},[340],{"source":78,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":341,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":342,"vectorString":79,"impactScore":343,"exploitabilityScore":344},"MEDIUM",6,2.6,[346,381],{"ecosystem":9,"name":347,"vendor":348,"product":348,"cpe_part":349,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":350},"Linux","linux","a",[351,358,361,364,367,370,373,376,379],{"version":352,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":356,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 426ee10711586617da869c8bb798214965337617",true,"e9b61f19858a5d6c42ce2298cf138279375d0d9b","including","426ee10711586617da869c8bb798214965337617","excluding",{"version":359,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":360,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C f1acf5887c2bbaf998dc3fe32c72b7a8b84a3ddd","f1acf5887c2bbaf998dc3fe32c72b7a8b84a3ddd",{"version":362,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":363,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 722cfaf6b31d31123439e67b5deac6b1261a3dea","722cfaf6b31d31123439e67b5deac6b1261a3dea",{"version":365,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":366,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 7ddcf4a245c1c5a91fdd9698757e3d95179ffe41","7ddcf4a245c1c5a91fdd9698757e3d95179ffe41",{"version":368,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":369,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C b8c49ad888892ad7b77062b9c102b799a3e9b4f8","b8c49ad888892ad7b77062b9c102b799a3e9b4f8",{"version":371,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":372,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 7ad1997b9bc8032603df8f091761114479285769","7ad1997b9bc8032603df8f091761114479285769",{"version":374,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":375,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 8bfb8414e9f2ce6f5f2f0e3d0da52f2d132128e7","8bfb8414e9f2ce6f5f2f0e3d0da52f2d132128e7",{"version":377,"is_range":353,"range_type":84,"version_start":354,"version_start_type":355,"version_end":378,"version_end_type":357,"fixed_in":9},">= e9b61f19858a5d6c42ce2298cf138279375d0d9b, \u003C 4c5e7f0fcd592801c9cc18f29f80fbee84eb8669","4c5e7f0fcd592801c9cc18f29f80fbee84eb8669",{"version":380,"is_range":72,"range_type":84,"version_start":380,"version_start_type":355,"version_end":380,"version_end_type":355,"fixed_in":9},"4.5",{"ecosystem":9,"name":382,"vendor":348,"product":383,"cpe_part":349,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":384},"Linux Kernel","linux kernel",[385,389,393,397,401,405,409,413,415,417,419,421],{"version":386,"is_range":353,"range_type":387,"version_start":380,"version_start_type":355,"version_end":388,"version_end_type":357,"fixed_in":9},"gte4.5_lt5.10.253","cpe","5.10.253",{"version":390,"is_range":353,"range_type":387,"version_start":391,"version_start_type":355,"version_end":392,"version_end_type":357,"fixed_in":9},"gte5.11_lt5.15.203","5.11","5.15.203",{"version":394,"is_range":353,"range_type":387,"version_start":395,"version_start_type":355,"version_end":396,"version_end_type":357,"fixed_in":9},"gte5.16_lt6.1.168","5.16","6.1.168",{"version":398,"is_range":353,"range_type":387,"version_start":399,"version_start_type":355,"version_end":400,"version_end_type":357,"fixed_in":9},"gte6.2_lt6.6.134","6.2","6.6.134",{"version":402,"is_range":353,"range_type":387,"version_start":403,"version_start_type":355,"version_end":404,"version_end_type":357,"fixed_in":9},"gte6.7_lt6.12.81","6.7","6.12.81",{"version":406,"is_range":353,"range_type":387,"version_start":407,"version_start_type":355,"version_end":408,"version_end_type":357,"fixed_in":9},"gte6.13_lt6.18.21","6.13","6.18.21",{"version":410,"is_range":353,"range_type":387,"version_start":411,"version_start_type":355,"version_end":412,"version_end_type":357,"fixed_in":9},"gte6.19_lt6.19.11","6.19","6.19.11",{"version":414,"is_range":72,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":416,"is_range":72,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":418,"is_range":72,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":420,"is_range":72,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":422,"is_range":72,"range_type":387,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5"]