CVE-2026-31654

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the mmap region() function. When /dev/zero is mapped with MAP SHARED, the mmap zero prepare() function calls shmem zero setup desc(), which allocates a new shmem file to back the mapping. If the mmap new vma() function subsequently fails, the replacement file is not released via fput(), leading to a memory leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.