Use After Free Vulnerability in Linux Kernel Affects Various Distributions

CVE-2026-31703

What is CVE-2026-31703?

A vulnerability exists in the Linux kernel's inode management code, specifically in the inode_switch_wbs_work_fn() function. It arises from improper management of work structures that could lead to a use after free scenario. When the function processes items in a loop, a lack of proper checks may allow the associated work structure to be freed while still pending, exposing systems to potential instability and security risks. The flaw was addressed by removing the loop to ensure that the work structure is retained as long as needed, thereby safeguarding against the possibility of freeing the structure while other operations are pending.

References