CVE-2026-31600: arm64: mm: Handle invalid large leaf mappings correctly
arm64: mm: Handle invalid large leaf mappings correctly
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch arm64: mm: Handle invalid large leaf mappings correctly - Compensating control
Use kernel command-line parameter to avoid triggering the problematic path related to invalid large leaf mappings: ensure the kernel is patched as described by the fix rather than relying on runtime behavior; if you cannot upgrade immediately, prevent realm guest boot until the updated kernel is deployed.
- Operational
After upgrading to a kernel including the fix for "arm64: mm: Handle invalid large leaf mappings correctly", reboot and verify that booting realm guests no longer triggers kernel panic/Oops during swiotlb bounce-buffer DMA mapping.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31600?
CVE-2026-31600 is categorized as a medium severity vulnerability in the Linux kernel affecting arm64 architecture.
How do I fix CVE-2026-31600?
To mitigate CVE-2026-31600, upgrade to the latest version of the Linux kernel that is not affected by this vulnerability.
What impacts does CVE-2026-31600 have on my system?
CVE-2026-31600 could lead to system instability and potential unauthorized access if exploited in vulnerable versions of the Linux kernel.
Which versions of the Linux kernel are affected by CVE-2026-31600?
CVE-2026-31600 affects multiple versions of the Linux kernel, specifically those from versions 6.18 through 7.0.1.
What type of vulnerability is CVE-2026-31600?
CVE-2026-31600 is a memory management vulnerability that involves improper handling of large leaf mappings in the arm64 architecture of the Linux kernel.