[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-31787":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T03:17:55.401Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":50,"related":51,"reserved_at":9,"published_at":58,"modified_at":59,"state":60,"summary":61,"references_raw":70,"kevs":115,"epss":116,"epss_history":119,"metrics":311,"affected":317},"CVE-2026-31787","In the Linux kernel, the following vulnerability has been resolved:\n\nxen/privcmd: fix double free via VMA splitting\n\nprivcmd_vm_ops defines .close (privcmd_close), but neither .may_split\nnor .open. When userspace does a partial munmap() on a privcmd mapping,\nthe kernel splits the VMA via __split_vma(). Since may_split is NULL,\nthe split is allowed. vm_area_dup() copies vm_private_data (a pages\narray allocated in alloc_empty_pages()) into the new VMA without any\nfixup, because there is no .open callback.\n\nBoth VMAs now point to the same pages array. When the unmapped portion\nis closed, privcmd_close() calls:\n    - xen_unmap_domain_gfn_range()\n    - xen_free_unpopulated_pages()\n    - kvfree(pages)\n\nThe surviving VMA still holds the dangling pointer. When it is later\ndestroyed, the same sequence runs again, which leads to a double free.\n\nFix this issue by adding a .may_split callback denying the VMA split.\n\nThis is XSA-487 / CVE-2026-31787",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-415","Double Free","The product calls free() twice on the same memory address.","weakness","Draft","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48],{"_key":25},"MGASA-2026-0108",{"_key":27},"MGASA-2026-0110",{"_key":29},"OPENSUSE-SU-2026:10703-1",{"_key":31},"DEBIAN-CVE-2026-31787",{"_key":33},"SUSE-SU-2026:21834-1",{"_key":35},"SUSE-SU-2026:2195-1",{"_key":37},"SUSE-SU-2026:2238-1",{"_key":39},"ALPINE-CVE-2026-31787",{"_key":41},"RHSA-2026:26427",{"_key":43},"RHSA-2026:26428",{"_key":45},"RHSA-2026:27288",{"_key":47},"RHSA-2026:27789",{"_key":49},"UBUNTU-CVE-2026-31787",[],[52,53,54,55,56],{"_key":29},{"_key":33},{"_key":35},{"_key":37},{"_key":57},"CGA-CX2M-89F9-7G8Q","2026-04-30T10:31:28.992Z","2026-06-14T17:44:41.402Z","Analyzed",{"cisa_kev":62,"cisa_ransomware":62,"cisa_vendor":9,"epss_severity":63,"epss_score":64,"severity":65,"severity_score":66,"severity_version":67,"severity_source":68,"severity_vector":69,"severity_status":60},false,"low",0.00183,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[71,77,81,85,89,93,97,101,107,111],{"url":72,"sources":73,"tags":75},"https://git.kernel.org/stable/c/dbf862ce9f009128ab86b234d91413a3e450beb4",[74,68],"cve.org",[76],"Patch",{"url":78,"sources":79,"tags":80},"https://git.kernel.org/stable/c/2b985d3a024b9e8c24e21671b34e855569763808",[74,68],[76],{"url":82,"sources":83,"tags":84},"https://git.kernel.org/stable/c/1576ff3869cbd3620717195f971c85b7d7fd62b5",[74,68],[76],{"url":86,"sources":87,"tags":88},"https://git.kernel.org/stable/c/402d84ad9e89bd4cbfd07ca8598532b7021daf95",[74,68],[76],{"url":90,"sources":91,"tags":92},"https://git.kernel.org/stable/c/2894a351fe2ea8684919d36df3188b9a35e3926f",[74,68],[76],{"url":94,"sources":95,"tags":96},"https://git.kernel.org/stable/c/446ee446d9ae66f36e95c3c90bbcc4e56b94cde0",[74,68],[76],{"url":98,"sources":99,"tags":100},"https://git.kernel.org/stable/c/71bf829800758a6e3889096e4754ef47ba7fc850",[74,68],[76],{"url":102,"sources":103,"tags":104},"http://www.openwall.com/lists/oss-security/2026/04/28/14",[74,68],[105,106],"Mailing List","Third Party Advisory",{"url":108,"sources":109,"tags":110},"http://xenbits.xen.org/xsa/advisory-487.html",[74,68],[106],{"url":112,"sources":113,"tags":114},"https://git.kernel.org/stable/c/24daca4fc07f3ff8cd0e3f629cd982187f48436a",[74,68],[76],[],{"date":117,"score":64,"percentile":118},"2026-07-05",0.08102,[120,124,127,130,133,136,139,143,147,150,153,155,158,160,162,165,168,171,173,176,179,182,185,189,192,194,196,198,201,204,207,210,213,216,219,222,224,226,229,232,235,237,240,243,245,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310],{"date":121,"score":122,"percentile":123},"2026-04-30",0.00033,0.09506,{"date":125,"score":122,"percentile":126},"2026-05-01",0.09464,{"date":128,"score":122,"percentile":129},"2026-05-02",0.09503,{"date":131,"score":122,"percentile":132},"2026-05-03",0.09482,{"date":134,"score":122,"percentile":135},"2026-05-04",0.09438,{"date":137,"score":122,"percentile":138},"2026-05-05",0.0943,{"date":140,"score":141,"percentile":142},"2026-05-06",0.00043,0.1299,{"date":144,"score":145,"percentile":146},"2026-05-07",0.00013,0.02023,{"date":148,"score":145,"percentile":149},"2026-05-08",0.0203,{"date":151,"score":145,"percentile":152},"2026-05-09",0.02048,{"date":154,"score":145,"percentile":152},"2026-05-10",{"date":156,"score":145,"percentile":157},"2026-05-11",0.02049,{"date":159,"score":145,"percentile":146},"2026-05-12",{"date":161,"score":145,"percentile":149},"2026-05-13",{"date":163,"score":145,"percentile":164},"2026-05-14",0.02028,{"date":166,"score":145,"percentile":167},"2026-05-15",0.02031,{"date":169,"score":145,"percentile":170},"2026-05-16",0.02032,{"date":172,"score":145,"percentile":167},"2026-05-17",{"date":174,"score":145,"percentile":175},"2026-05-18",0.02017,{"date":177,"score":145,"percentile":178},"2026-05-19",0.02007,{"date":180,"score":145,"percentile":181},"2026-05-20",0.02,{"date":183,"score":145,"percentile":184},"2026-05-21",0.01987,{"date":186,"score":187,"percentile":188},"2026-05-22",0.00006,0.00328,{"date":190,"score":187,"percentile":191},"2026-05-23",0.00327,{"date":193,"score":187,"percentile":191},"2026-05-24",{"date":195,"score":187,"percentile":191},"2026-05-25",{"date":197,"score":187,"percentile":191},"2026-05-26",{"date":199,"score":187,"percentile":200},"2026-05-27",0.00334,{"date":202,"score":187,"percentile":203},"2026-05-28",0.00335,{"date":205,"score":187,"percentile":206},"2026-05-29",0.0034,{"date":208,"score":187,"percentile":209},"2026-05-30",0.00345,{"date":211,"score":187,"percentile":212},"2026-05-31",0.00343,{"date":214,"score":187,"percentile":215},"2026-06-01",0.00463,{"date":217,"score":187,"percentile":218},"2026-06-02",0.0047,{"date":220,"score":187,"percentile":221},"2026-06-03",0.00467,{"date":223,"score":187,"percentile":221},"2026-06-04",{"date":225,"score":187,"percentile":218},"2026-06-05",{"date":227,"score":187,"percentile":228},"2026-06-06",0.00472,{"date":230,"score":187,"percentile":231},"2026-06-07",0.00468,{"date":233,"score":187,"percentile":234},"2026-06-08",0.00464,{"date":236,"score":187,"percentile":231},"2026-06-09",{"date":238,"score":187,"percentile":239},"2026-06-10",0.00471,{"date":241,"score":187,"percentile":242},"2026-06-11",0.00473,{"date":244,"score":187,"percentile":218},"2026-06-12",{"date":246,"score":187,"percentile":228},"2026-06-13",{"date":248,"score":187,"percentile":249},"2026-06-14",0.0048,{"date":251,"score":64,"percentile":252},"2026-06-15",0.08053,{"date":254,"score":64,"percentile":255},"2026-06-16",0.0807,{"date":257,"score":64,"percentile":258},"2026-06-17",0.08065,{"date":260,"score":64,"percentile":261},"2026-06-18",0.08058,{"date":263,"score":64,"percentile":264},"2026-06-19",0.08031,{"date":266,"score":64,"percentile":267},"2026-06-20",0.08024,{"date":269,"score":64,"percentile":270},"2026-06-21",0.08014,{"date":272,"score":64,"percentile":273},"2026-06-22",0.07991,{"date":275,"score":64,"percentile":276},"2026-06-23",0.07998,{"date":278,"score":64,"percentile":279},"2026-06-24",0.08008,{"date":281,"score":64,"percentile":282},"2026-06-25",0.08084,{"date":284,"score":64,"percentile":285},"2026-06-26",0.08112,{"date":287,"score":64,"percentile":288},"2026-06-27",0.08135,{"date":290,"score":64,"percentile":291},"2026-06-28",0.08106,{"date":293,"score":64,"percentile":294},"2026-06-29",0.08101,{"date":296,"score":64,"percentile":297},"2026-06-30",0.08104,{"date":299,"score":64,"percentile":300},"2026-07-01",0.08131,{"date":302,"score":64,"percentile":303},"2026-07-02",0.08117,{"date":305,"score":64,"percentile":306},"2026-07-03",0.081,{"date":308,"score":64,"percentile":309},"2026-07-04",0.08103,{"date":117,"score":64,"percentile":118},[312],{"source":68,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":313,"cvss_v4_0":9},{"baseScore":66,"baseSeverity":314,"vectorString":69,"impactScore":315,"exploitabilityScore":316},"HIGH",9.8,4.6,[318,368],{"ecosystem":9,"name":319,"vendor":320,"product":320,"cpe_part":321,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":322},"Linux","linux","a",[323,330,333,336,339,342,345,348,351,353,355,357,359,361,363,366],{"version":324,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":328,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C dbf862ce9f009128ab86b234d91413a3e450beb4",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","dbf862ce9f009128ab86b234d91413a3e450beb4","excluding",{"version":331,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":332,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 2b985d3a024b9e8c24e21671b34e855569763808","2b985d3a024b9e8c24e21671b34e855569763808",{"version":334,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":335,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 1576ff3869cbd3620717195f971c85b7d7fd62b5","1576ff3869cbd3620717195f971c85b7d7fd62b5",{"version":337,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":338,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 402d84ad9e89bd4cbfd07ca8598532b7021daf95","402d84ad9e89bd4cbfd07ca8598532b7021daf95",{"version":340,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":341,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 2894a351fe2ea8684919d36df3188b9a35e3926f","2894a351fe2ea8684919d36df3188b9a35e3926f",{"version":343,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":344,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 446ee446d9ae66f36e95c3c90bbcc4e56b94cde0","446ee446d9ae66f36e95c3c90bbcc4e56b94cde0",{"version":346,"is_range":325,"range_type":74,"version_start":326,"version_start_type":327,"version_end":347,"version_end_type":329,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 71bf829800758a6e3889096e4754ef47ba7fc850","71bf829800758a6e3889096e4754ef47ba7fc850",{"version":349,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":328,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C dbf862ce9f009128ab86b234d91413a3e450beb4","d71f513985c22f1050295d1a7e4327cf9fb060da",{"version":352,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":332,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 2b985d3a024b9e8c24e21671b34e855569763808",{"version":354,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":335,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 1576ff3869cbd3620717195f971c85b7d7fd62b5",{"version":356,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":338,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 402d84ad9e89bd4cbfd07ca8598532b7021daf95",{"version":358,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":341,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 2894a351fe2ea8684919d36df3188b9a35e3926f",{"version":360,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":344,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 446ee446d9ae66f36e95c3c90bbcc4e56b94cde0",{"version":362,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":347,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 71bf829800758a6e3889096e4754ef47ba7fc850",{"version":364,"is_range":325,"range_type":74,"version_start":350,"version_start_type":327,"version_end":365,"version_end_type":329,"fixed_in":9},">= d71f513985c22f1050295d1a7e4327cf9fb060da, \u003C 24daca4fc07f3ff8cd0e3f629cd982187f48436a","24daca4fc07f3ff8cd0e3f629cd982187f48436a",{"version":367,"is_range":62,"range_type":74,"version_start":367,"version_start_type":327,"version_end":367,"version_end_type":327,"fixed_in":9},"3.8",{"ecosystem":9,"name":369,"vendor":320,"product":370,"cpe_part":321,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":371},"Linux Kernel","linux kernel",[372,376,380,384,388,392,396,400,402],{"version":373,"is_range":325,"range_type":374,"version_start":367,"version_start_type":327,"version_end":375,"version_end_type":329,"fixed_in":9},"gte3.8_lt5.10.254","cpe","5.10.254",{"version":377,"is_range":325,"range_type":374,"version_start":378,"version_start_type":327,"version_end":379,"version_end_type":329,"fixed_in":9},"gte5.11_lt5.15.204","5.11","5.15.204",{"version":381,"is_range":325,"range_type":374,"version_start":382,"version_start_type":327,"version_end":383,"version_end_type":329,"fixed_in":9},"gte5.16_lt6.1.170","5.16","6.1.170",{"version":385,"is_range":325,"range_type":374,"version_start":386,"version_start_type":327,"version_end":387,"version_end_type":329,"fixed_in":9},"gte6.2_lt6.6.137","6.2","6.6.137",{"version":389,"is_range":325,"range_type":374,"version_start":390,"version_start_type":327,"version_end":391,"version_end_type":329,"fixed_in":9},"gte6.7_lt6.12.85","6.7","6.12.85",{"version":393,"is_range":325,"range_type":374,"version_start":394,"version_start_type":327,"version_end":395,"version_end_type":329,"fixed_in":9},"gte6.13_lt6.18.26","6.13","6.18.26",{"version":397,"is_range":325,"range_type":374,"version_start":398,"version_start_type":327,"version_end":399,"version_end_type":329,"fixed_in":9},"gte6.19_lt7.0.3","6.19","7.0.3",{"version":401,"is_range":62,"range_type":374,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc1",{"version":403,"is_range":62,"range_type":374,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.1:rc2"]